topic Re: ISE integration with Third Party Proxy in Network Access Control

ISE integration with Third Party Proxy

ecanogut — Tue, 29 Aug 2017 16:29:28 GMT

Hello all,

One of my customer wants to integrate ISE with a Fortinet proxy so that when a user (already authenticated on ISE) wants to navigate on internet the proxy does not prompt for user's credentials.

My understanding is ISE should send authorization session to the proxy to achieve this.

Does any one has done something similar to this?.

Thanks in advanced.

Re: ISE integration with Third Party Proxy

Timothy Abbott — Tue, 29 Aug 2017 18:34:34 GMT

This functionality is already supported by Cisco WSA. The WSA uses pxGrid to fetch SGT information for the end user accessing the internet. Fortinet would need to build a pxGrid client into their solution to download identity information from ISE.

Regards,

-Tim

Re: ISE integration with Third Party Proxy

Jason Kunst — Tue, 29 Aug 2017 18:44:48 GMT

please see several other posts on the issue with ISE sending RADIUS to Fortinet

https://communities.cisco.com/search.jspa?q=ise+fortinet

Re: ISE integration with Third Party Proxy

ecanogut — Wed, 30 Aug 2017 14:27:22 GMT

So, my question is: Can fortinet be integrated with ISE using PxGrid?

Re: ISE integration with Third Party Proxy

gbekmezi-DD — Wed, 30 Aug 2017 14:30:32 GMT

Have you asked fortinet if they have a PXGrid client in any of their firewalls?

Warning: I either dictated this to my device, or typed it with my thumbs. Erroneous words are a feature, not a typo.

Re: ISE integration with Third Party Proxy

Jason Kunst — Wed, 30 Aug 2017 14:35:20 GMT

No, you will need to ask them to reach out and start the process

https://www.cisco.com/c/en/us/products/security/pxgrid.html

Re: ISE integration with Third Party Proxy

ecanogut — Wed, 30 Aug 2017 14:42:41 GMT

Thank you all for your answers, will inform the customer about it.