Cisco ISE pxGrid and Threat Centric NAC

[SaintEvn]

Hi,

I'm confusing about ISE pxGrid and TC-NAC.
Are they the same function?
Or are they different ?
Can you guys help me to understand what is pxGid and when to use it .And also what is TC-NAC and when we need to use it?

Thank you so much!

[Mohammed al Baqari · Accepted solution]

Hi,

PxGrid in simple words is the protocol to exchange information about
endpoint between ISE and other devices. When the endpoint connects to the
network (wired or wireless) ISE authenticates it and then notify all
equipment within the network that a new endpoint is present (FMC, WSA, or
3rd party). These devices can be configured for user policy. It can go
beyond that by assigning security group tags (SGT) but this is advanced
stuff.

TC-NAC leverages PxGrid to communicate with FMC. When FMC detects an IOC
for an endpoint (for example infected with malware or initiating CnC), FMC
uses PxGrid to notify ISE to isolate the endpoint. At this point TC-NAC
kicks in.

**** please remember to rate useful posts

[Peter Koltl]

Rapid Threat Containment leverages PxGrid to communicate with FMC. When FMC detects an IOC for an endpoint (for example infected with malware or initiating CnC), FMC
uses PxGrid to notify ISE to isolate the endpoint. At this point Rapid Threat Containment kicks in.

TC-NAC integrates ISE endpoint database with a vulnerability scanner such as Rapid7 Nexpose.

[SaintEvn]

Thank you so much all!!