Solved: Re: ISE WSA pxGrid

Mjokovic88 · ‎04-02-2019

Hello,

I have Cisco WSA s370 with version of AsyncOS 11.5.2 which version of ISE I have to use to set pxGrid between them?

Damien Miller · ‎04-02-2019

So for the OP, 2.4 will work fine with 11.5, but for others with older ise deployments, they have to be careful.

It was also my understanding that if we upgrade to 11.7, then you have to have 2.4+. Something about dropping support for pxgrid v1 in WSA 11.7.

I haven't been able to test the integration with 11.7 because it's limited deployment only, no one can give me an ova to download.

The guide has been around for a while at least.
https://community.cisco.com/t5/security-documents/deploying-cisco-wsa-11-7-with-cisco-identity-services-engine-ise/ta-p/3787672

View solution in original post

Timothy Abbott · ‎04-02-2019

Our recommended release is 2.4. From what I understand, that version of AsyncOS will only subscribe to the TrustSec metadata topic in pxGrid. 11.7 subscribes to additional pxGrid topics for identity.

Regards,
-Tim

Damien Miller · ‎04-02-2019

So for the OP, 2.4 will work fine with 11.5, but for others with older ise deployments, they have to be careful.

It was also my understanding that if we upgrade to 11.7, then you have to have 2.4+. Something about dropping support for pxgrid v1 in WSA 11.7.

I haven't been able to test the integration with 11.7 because it's limited deployment only, no one can give me an ova to download.

The guide has been around for a while at least.
https://community.cisco.com/t5/security-documents/deploying-cisco-wsa-11-7-with-cisco-identity-services-engine-ise/ta-p/3787672

Mjokovic88 · ‎04-03-2019

Hello, version 2.4 Ise and 11.5.2 WSA works fine. Thanks for help.