ISE Machine Certificates Only + Stealthwatch PxGrid + ISE Passive Identity

[kkaminsk]

Hi Folks,

I have a scenario where I am doing ISE with Machine only Certificate Authentication.  The system is connected via PxGrid to Stealthwatch.  Stealthwatch 7.1 latest patch and ISE 2.6 latest patch.  I want to get the username context into Stealthwatch.  I can make a passive identity connection into the AD domain which is the same AD domain I am connected to for authentication.  This works in the lab.

My question - is this supported for production?

[Colby LeMaire · Accepted solution]

I don't see why it wouldn't be supported.  I have a client of mine that is doing this exact thing in production today.