pxGrid - Need more information

[dgaikwad]

Hi Experts,

Recently I have started working on integrating another product with Cisco ISE via pxGrid and it has really peaked my interest.

I would really like to know how does pxGrid work (overall and internal workings).

How does it interact with the other eco-system partners?

What are the things that could be accomplished with pxGrid?

How it help to enhance all the information that already present in ISE?

These are just some of the questions that I have...

Could anyone direct me to all the material for pxGrid, is much appreciated.

Thank you,

[Craig Hyps · Accepted solution]

These are some resources to get you started...

General overview, links to How-To Guides and use case/examples:

https://www.cisco.com/c/en/us/products/security/pxgrid.html

Developer Resources:

https://developer.cisco.com/site/pxgrid/

Cisco Live Orlando sessions on pxGrid:

https://www.ciscolive.com/global/on-demand-library/?search.event=ciscoliveus2018&search=pxgrid#/

In a nutshell, pxGrid can be used to share ISE context with other systems, such as active users on the network along with their current IP for Identity-Based firewall, or what is the classification (Profile) or policy (SGT) or Compliance (Posture status) of an endpoint on the network.   Many different vendors and products leverage this data to make more intelligent and actionable decisions including SIEM, IPAM, Identity Providers, VA, Threat, and Security Systems.

Through Rapid Threat Containment, external sources can alert ISE when policy action needs to be taken for a connected endpoint.  Starting in ISE 2.4, external parties can publish context to ISE such as detailed asset inventory or other custom attributes to increase ISE visibility and apply access policy.

/Craig