Parsing identity on ISE acquired by EAP Chaining

[pmesjar]

Hi team,

EAP Chaining identity acquired by ISE cannot be used with FMC access control policy. Is there a way to parse interesting fields from EAP Chaining identity before it is conveyed to FMC via pxGrid, eg. AD group? I can overcome this limitation via SGTs, but this might become too complex if customer wishes to go too granular.

/Peter

[Surendra · Accepted solution]

There is no provision to edit the logs before they are sent to any syslog collector or for that matter via pxGrid. Events are relayed the way they are logged without any modifications.

[pmesjar]

Thanks Surendra.
/Peter