FTD - ISE pxGRID Capability

[Oliver Kaiser]

I would like to integrate ISE into FirePOWER Management Center 6.0.1.1 and want to know if 

Identity Mappings (IP : User) are provided via pxGRID or if FirePOWER Agent is still required.

[ankojha]

Hi,

Yes, pxgrid service is available for 6.0 version.

You can check the details from the below document :

http://www.cisco.com/c/en/us/support/docs/security/identity-services-engine/200240-ISE-and-FirePower-integration-remediat.html

Rate and mark correct if it helps.

Thanks,

Ankita

[Oliver Kaiser]

Hi Ankita,

Thanks for your response but the link does not answer my question. I will try to re-state my question, I might have been unclear.

FirePOWER User Agent is used to check the Security Log to map Active Directory Users to IP addresses. This information is provided to FirePOWER Management Center for policy enforcement.

Now I got a pxGRID Integration from FirePOWER Management Center to ISE. Does ISE provide the same IP to User mappings as FirePOWER User Agent or is the agent still required?

kind regards

Oliver

[michaellperrin · Accepted solution]

Hi Oliver,

The answer is yes.  ISE will provide the same user to IP mappings that the agent provides.

The following DOC should help.

http://www.cisco.com/c/en/us/support/docs/security/identity-services-engine/200319-Troubleshoot-ISE-and-FirePOWER-Integrati.pdf