Stealthwatch pxGrid 2.0 permissions on ISE

[SMD28316]

As I understand Stealthwatch 7.3.2 uses PxGrid v2.0 only, and I didn't find a document to explain how it can be done, only for PxGrid v1.0.

My main issue is configuring the permissions for Stealthwatch, I tried many combinations but it's always OFF in the ISE web clients and the reason is "Not authorized to subscribe to /topic/com.cisco.ise.config.trustsec.security.group".

[ahollifield]

What version of ISE? 

[SMD28316]

2.6

[ahollifield]

ISE 2.4 added support for pxGrid 2.0 so you should be there.  I would say TAC is probably your best bet to troubleshoot.  Also probably time to start planning for an ISE upgrade: https://www.cisco.com/c/en/us/products/collateral/security/identity-services-engine/bulletin-c25-2503911.html

[Greg Gibbs · Accepted solution]

There is a specific ISE Configuration Guide for Stealthwatch (SNA) version 7.3.2.

I would ensure you have followed all of the steps in this guide. If so, and you are still having issues with the pxGrid integration, you may need to open a TAC case to investigate further.