ISE 1.3 px grid

[ja.patrick1080]

I am planning to upgrade to ISE 1.3 and learn that we have a new persona pxgrid. Can any one pls tell what pxgrid exactly does and any implementation advise will be very helpful
 

[nspasov]

Check out the following link:

http://www.cisco.com/c/dam/en/us/products/collateral/security/identity-services-engine/at_a_glance_c45-728420.pdf

Thank you for rating helpful posts!

[mohanak]

Cisco pxGrid Services

Cisco pxGrid is used to enable the sharing of contextual-based information from Cisco ISE session directory to other policy network systems such as Cisco Adaptive Security Appliance (ASA). The pxGrid framework can also be used to exchange policy and configuration data between nodes like sharing tags and policy objects between ISE and third party vendors, and for non-ISE related information exchanges such as threat information. You can enable the pxGrid Services from the Administration > Deployment page.

Cisco pxGrid Identity Mapping

The pxGrid Identity Mapping option enables you to monitor users that are authenticated by a Domain Controller (DC) and not by Cisco ISE, when Cisco pxGrid services are used. In networks where Cisco ISE does not actively authenticate users for network access, it is possible to use Identity Mapping to collect user authentication information from the active directory (AD) Domain Controller. Identity Mapping collects session information from the domain controller similar to Context Directory Agent (CDA). For more information on CDA, refer to Installation and Configuration Guide for Context Directory Agent.

You can configure Identity Mapping by navigating to Administration > pxGrid Identity Mapping > AD Domain Controllers.

http://www.cisco.com/c/en/us/td/docs/security/ise/1-3/admin_guide/b_ise_admin_guide_13/b_ise_admin_guide_sample_chapter_011.html#task_FC74C5951C1042C8828DA9E6795AB91F

[Venkatesh Attuluri]

with  px grid protocol ISE supports  integration with other security solutions.You can find example configuration of ISE Version 1.3 pxGrid Integration with IPS pxLog Application here

http://www.cisco.com/c/en/us/support/docs/security/identity-services-engine/118688-technote-pxlog-00.html