Is SXP between ISE supported ?

[jerkessl]

Hi all,

Is SXP between ISE supported ?

Use case is one ISE connected through pxGrid to FMC in the main company and using SGT to filter traffic in FTD.

Another company has been bought which use a different ISE but no trustsec, no inline tagging. Machines from main company is authenticated in this ISE in the bought company premise but the SGT-IP mappings is not propagated to FMC because FMC support only one ISE.

So it is possible to send mappings to the main ISE from the other ISE to have those mappings sent to the FMC ?

Regards,

[jeaves@cisco.com · Accepted solution]

Hi Jeremy,

to formally reply after our chat, yes this works as SXP interworking conforms to the IETF draft. Also as confirmed with Kevin, this is supported.

Regards, Jonothan.