ISE and Cisco WSA(Ironport) integration

[michaellperrin]

I was wondering if anyone can confirm if ISE is able to integrate with WSA to enforce policies?

I heard it was coming, but cannot find any info online

[S M85]

it's in the release notes. Latest WSA SW 8.7 software is capable of doing this. You need to have ISE 1.3 minimal. I think this is related to PxGrid, this functionalitiy is there from this version. 

http://www.cisco.com/c/dam/en/us/td/docs/security/wsa/wsa8-5/WSA_8-7_Release_Notes.pdf 

[S M85]

Also look into this manual, you need certs or something for secure communication between the ISE nodes. Not familiar myself, so can't help you further, but the documentation is here. 

chapter 8-1 

http://www.cisco.com/c/dam/en/us/td/docs/security/wsa/wsa8-5/WSA_8-7-0_UserGuide.pdf 

[Venkatesh Attuluri]

Yes WSA can communicate with ISE 1.3 via PxGrid . You will be needing ISE Plus license

http://www.cisco.com/c/en/us/support/docs/security/identity-services-engine/118688-technote-pxlog-00.html