ISE 2.1 and remote log server questions

[csco11552159]

Hi Folks,

Another question about ISE 2.1 and Arcsight integration. Is there a way to use pxgrid to integrate Arcisght now?

If not,we have 2 MNT nodes in 2 regions.

1) Can we setup log from each MNT server only sends to the local region Arcsight server ?

2) How the MNT works? On NAD switch, should we send to both MNT or only configure the local MNT for the NAD?

Thank you.

[jeppich · Accepted solution]

Hi Chao,

No, Arcsight does not use pxGrid to integrate with ISE, Arcsight uses ISE syslog information for integration. You would configure Arcsight as the syslog server in your local ISE instance. Administration->System->Logging->Remote Logging Targets.

Also if you send me an email, i will send you the Arcsight Integration guide.

Thanks,

John

jeppich@cisco.com