Feb 2021 - please note this is on older pxGrid 1.0 technology. Vendors should be moving to pxGrid 2.0 and ISE 2.7 as latest recommended release.
pxGrid 1.0 will be going away and is only in maintenance mode as of ISE 3.0
This document should be archived eventually as no longer recommended
This document is for Cisco Engineers, McAfee Engineers, partners and customers deploying McAfee Data Exchange Layer (DXL) Broker 4.0., McAfee ePolicy Orchestrator (ePO 5.9) with Cisco Platform Exchange Grid (pxGrid) using Cisco Identity Services Engine (ISE 2.3).
This document illustrates the steps required to configure the use cases below. This document also includes the following use cases:
n An Eicar Virus is detected on the endpoint, McAfee ePO generates an automated response where the McAfee DXL broker triggers an ISE pxGrid Adaptive Network Control (ANC) mitigation action, quarantining the endpoint in ISE.
This is a basic use case and illustrates the integration between McAfee DXL broker and Cisco ISE pxGrid node.
n The McAfee DXL broker python client receives ISE ANC “quarantined policy” notifications through Cisco pxGrid and McAfee ePO assigns a policy tag of “quarantined” to the endpoint when a violation in the ISE ANC policy occurs. Once this endpoint has been tagged by McAfee ePO, McAfee ePO can take manual action as defied by the McAfee ePO admin.
This use case is more advanced and is optional.
n The endpoint does not have the McAfee agent installed, ISE posture will detect this, and deem the endpoint non-compliant. A remediation link will be provided to the end-user via ePO to download and install the application. Once ISE detects that the McAfee ePO is installed, the endpoint is now compliant and granted full network access.
This use case is more advanced and is optional
n An employee-owned laptop goes through the organization’s on-boarding process to satisfy the organization’s BYOD initiative. The EPO admin can then install on the endpoint centrally or manually by the by the end- user.
This use case is more advanced and is optional
