topic Re: ISE-PIC integration options in Network Access Control

ISE-PIC integration options

imihajlo — Tue, 19 Jun 2018 10:14:46 GMT

Hello,

Could you please advise me today what we can integrate ISE-PIC with?

We can integrate ISE-PIC with FMC and Stealthwatch - is that integration using pxGrid only? Can we out of this integration use just user identities or this is just for SGT exchange? Can we via pxGrid integration obtain from ISE-PIC just IP address to usernames mappings?

How about integration with ASA? We used to have CDA which we were integrating with ASA for IDFW feature. Does that work today with ISE-PIC in place of CDA?

Do we have any guides please around ISE-PIC integrations?

Many Thanks

Ivana

Re: ISE-PIC integration options

Timothy Abbott — Tue, 19 Jun 2018 10:57:59 GMT

Hi,

The only integration options for ISE-PIC are FMC and StealthWatch using pxGrid. ISE-PIC sends user to IP mappings only since it does not support active authentication (802.1X, SGT assignment, etc.). For IDFW, you will need to continue using CDA as ISE-PIC currently lacks the RADIUS interface ASA requires to learn identity.

Regards,

-Tim

Re: ISE-PIC integration options

imihajlo — Tue, 19 Jun 2018 14:35:34 GMT

Thanks Tim

Regards,

Ivana

Ivana Mihajlovic

Customer Success Manager

Cisco CCIE Security, ISC2 CISSP, ISC2 CCSP, AWS Certified Solution Architect - Associate, TOGAF 9, ITIL, Proact BOST Bronze, Master Project Management

Cisco Systems, Inc.

Pegasus Parc De kleetlaan 6a

DIEGEM 1831 Belgium

imihajlo@cisco.com

Re: ISE-PIC integration options

Ashraf Zarkani — Wed, 10 Apr 2019 16:33:10 GMT

Hi,

i was wondering if the ISE-PIC integration is still not supported on ASA until now !

i have a case where the customer asking me the same question, but i can not find an updated document about it.

thank you.

-Ashraf

Re: ISE-PIC integration options

Timothy Abbott — Wed, 10 Apr 2019 18:37:02 GMT

ISE-PIC still lacks the CDA RADIUS interface that the ASA needs to pull identity.

Regards,
-Tim

Re: ISE-PIC integration options

Ashraf Zarkani — Thu, 11 Apr 2019 06:52:24 GMT

Dear Tim,

thank you for you help, appreciate your fast response.

thanks,

Ashraf