Course Title: One Cisco Experience Lab
Course Description:
Cisco Secure Networking delivers the One Cisco Experience by unifying networking, security, observability, and policy into a single integrated architecture designed to protect modern enterprises across campus, branch, WAN, cloud, and remote access environments. By combining deep visibility, identity-driven access control, and Zero Trust enforcement across every connection point, organizations can simplify operations, strengthen security posture, and improve digital resilience.
In this hands-on lab, participants will deploy either a BGP EVPN fabric or an SDA-LISP Campus fabric as the foundation for a modern Cisco Secure Network supporting both macro and micro segmentation. Through guided exercises, you’ll experience how Cisco technologies work together seamlessly across domains using Cisco Security Cloud Control, Secure Firewall Management Center (cdFMC/FTD), Cisco Secure Access, Duo, Catalyst SD-WAN, Identity Services Engine (ISE), ThousandEyes, and Security Group Tags (SGTs) to deliver unified policy enforcement, shared telemetry, and consistent user experiences.
You’ll implement integrated workflows that connect networking and security operations across campus, branch, data center, and remote users. Real-world use cases include securing users and devices accessing local and cloud applications, protecting IoT environments through identity-based segmentation, and enabling secure remote access using Zero Trust Network Access (ZTNA). Participants will also explore how Cisco’s unified platform approach enables consistent policy, end-to-end visibility, and faster troubleshooting across switching, wireless, SD-WAN, cloud security, and firewall infrastructure.
By the end of the lab, you’ll gain practical experience deploying and validating a fully integrated Cisco architecture that demonstrates the power of the One Cisco Experience—bringing together connectivity, security, and observability into a cohesive operational model for the modern enterprise.
Workshop Highlights
- Build a Modern Cisco Secure Network: Deploy either a Cisco SDA-LISP Campus Fabric or BGP EVPN Fabric as the foundation for Zero Trust segmentation and secure connectivity.
- Hands-On Zero Trust Implementation: Configure identity-based access control, SGT-driven segmentation, Secure Access, Duo MFA, and Secure Firewall policy enforcement across campus, WAN, and remote access environments.
- End-to-End Security Integration: Integrate Cisco Security Cloud Control, ISE, Secure Access, SD-WAN, ThousandEyes, and Secure Firewall for unified policy and telemetry sharing.
- Real-World Security Use Cases: Secure users, IoT devices, branch connectivity, SaaS applications, and private applications using practical enterprise scenarios.
- Guided Expert-Led Labs: Follow step-by-step exercises with instructor and proctor support while validating policy enforcement, segmentation, and observability across the infrastructure.
Key Takeaways
- Practical experience deploying a Zero Trust-based Cisco Secure Network architecture.
- Hands-on skills configuring macro and micro segmentation using Virtual Networks (VNs), TrustSec, and Security Group Tags (SGTs).
- Experience integrating Cisco ISE, Duo, Active Directory, Secure Access, SD-WAN, and Secure Firewall into a unified policy framework.
- Understanding of secure remote access technologies including ZTNA, VPN-as-a-Service, and browser-based access.
- Skills to deploy and validate secure campus and branch architectures using Cisco Catalyst Center, SDA, EVPN, and SD-WAN.
- Experience using ThousandEyes and telemetry tools for visibility, monitoring, and troubleshooting.
- Confidence troubleshooting identity, policy, segmentation, and connectivity issues across enterprise environments.
Who Should Attend
- Network engineers and architects designing modern enterprise campus, branch, and WAN infrastructures.
- Security engineers implementing Zero Trust, segmentation, and secure access solutions.
- IT professionals responsible for campus networking, SD-WAN, wireless, or data center security.
- Cisco partners, consultants, and technical teams supporting Secure Networking deployments.
- Anyone interested in gaining hands-on experience with Cisco’s integrated Zero Trust and Secure Networking architecture.
Workshop Format
- Hands-On Lab: Interactive guided exercises in a fully integrated Hardware Based lab environment.
- Real-World Enterprise Scenarios: Deploy and validate policies across campus, WAN, remote access, IoT, and data center environments.
- Step-by-Step Guided Labs: Instructor-led walkthroughs with hands-on implementation and validation tasks.
- Dedicated Hardware POD Access: Access to a dedicated hardware pod lab environment for independent configuration and testing.
- Expert Support: Live assistance from instructors and proctors throughout the workshop.
Prerequisites
- Familiarity with basic networking concepts including routing, switching, and wireless networking.
- Basic understanding of security concepts such as VPNs, segmentation, identity, and access control.
- Prior exposure to Cisco networking or security technologies is helpful but not required.
- General knowledge of enterprise networking environments, SD-WAN, or campus architectures is recommended.
- Access to a Cisco dCloud account (provided as part of the course)
Why Attend?
This workshop provides a unique opportunity to gain practical, hands-on experience building and securing a modern enterprise network using Cisco’s Zero Trust architecture. Rather than only learning the concepts, you’ll deploy, integrate, validate, and troubleshoot real security and networking technologies across campus, branch, WAN, cloud, and remote access environments. By the end of the lab, you’ll have the knowledge and confidence to implement unified policy enforcement, secure segmentation, observability, and secure access strategies that help organizations reduce risk and strengthen digital resilience.