11-20-2022 01:19 AM
What are the advantages of using pxGrid in ISE?
I've read several pxGrid integration guides.
But I don't understand the use case exactly.
For example,
When using FMC and ISE without integrating
When integrating with FMC
What makes a difference??
Solved! Go to Solution.
11-20-2022 02:08 AM
@JustTakeTheFirstStep pxGrid is a secure communication protocol, when configured ISE will share context information (User/IP binding, SGTs (Security Group Tag), SGT/IP bindings, endpoint profile information, threat data etc) with the FMC and other subscribed systems such as Stealthwatch, DNAC, WSA and other 3rd party solutions.
In regard to ISE/FMC integration, with this information learnt from pxgrid on the FMC, you will now have a username associated to the IP address. You can then create rules based on username or AD group (with AD realm) instead of just the IP address and also provide more useful information when looking at the firewall logs. You will also have the ability for the FMC to instruct ISE to quarantine the user/endpoint at source (the connected switchport) based on a firewall event (malicious activity).
https://www.ciscopress.com/articles/article.asp?p=2963461
11-20-2022 02:08 AM
@JustTakeTheFirstStep pxGrid is a secure communication protocol, when configured ISE will share context information (User/IP binding, SGTs (Security Group Tag), SGT/IP bindings, endpoint profile information, threat data etc) with the FMC and other subscribed systems such as Stealthwatch, DNAC, WSA and other 3rd party solutions.
In regard to ISE/FMC integration, with this information learnt from pxgrid on the FMC, you will now have a username associated to the IP address. You can then create rules based on username or AD group (with AD realm) instead of just the IP address and also provide more useful information when looking at the firewall logs. You will also have the ability for the FMC to instruct ISE to quarantine the user/endpoint at source (the connected switchport) based on a firewall event (malicious activity).
https://www.ciscopress.com/articles/article.asp?p=2963461
Discover and save your favorite ideas. Come back to expert answers, step-by-step guides, recent topics, and more.
New here? Get started with these tips. How to use Community New member guide