What are the advantages of using pxGrid in ISE?

JustTakeTheFirstStep — Sun, 20 Nov 2022 09:19:23 GMT

What are the advantages of using pxGrid in ISE?
I've read several pxGrid integration guides.
But I don't understand the use case exactly.
For example,
When using FMC and ISE without integrating
When integrating with FMC
What makes a difference??

Re: What are the advantages of using pxGrid in ISE?

Rob Ingram — Sun, 20 Nov 2022 10:08:22 GMT

@JustTakeTheFirstStep pxGrid is a secure communication protocol, when configured ISE will share context information (User/IP binding, SGTs (Security Group Tag), SGT/IP bindings, endpoint profile information, threat data etc) with the FMC and other subscribed systems such as Stealthwatch, DNAC, WSA and other 3rd party solutions.

In regard to ISE/FMC integration, with this information learnt from pxgrid on the FMC, you will now have a username associated to the IP address. You can then create rules based on username or AD group (with AD realm) instead of just the IP address and also provide more useful information when looking at the firewall logs. You will also have the ability for the FMC to instruct ISE to quarantine the user/endpoint at source (the connected switchport) based on a firewall event (malicious activity).

https://www.ciscopress.com/articles/article.asp?p=2963461

topic What are the advantages of using pxGrid in ISE? in Network Access Control

What are the advantages of using pxGrid in ISE?

Re: What are the advantages of using pxGrid in ISE?