Multicast in ISE

[martucci]

I have a customer asking if we still use Multicast for PSN. I have looked at different documents, and it looks so, but somehow I also have a vague memory of a change removing the need for Multicast, but I might be wrong.

I cannot find anything about it.

Could  you please confirm so I can make sure I give the right answer?

[hslai · Accepted solution]

Since ISE 1.3, the node groups in ISE no longer use multi-cast addresses and the communication is secured by SSL/TCP. See Slides 157 ~ 167 in the reference presentation of BRKSEC-3699 - Designing ISE for Scale and High Availability (2017 Melbourne)