Heads Up :
The post you are writing will appear in a public forum. Please ensure all content is appropriate for public consumption. Review the employee guidelines for the community here.
The official IBM QRadar pxGrid App How-to Guide is attached to this document.
On app updates, Its recommended to remove the old app and a new install of the updated app.
There are multiple versions of the guide depending on which version you need....
This document is for Cisco Engineers, partners and customers deploying Cisco Stealthwatch 7.x with Cisco Identity Services Engine (ISE) 2.4 using Cisco Platform Exchange Grid (pxGrid)
In this release ANC mitigation actions have been updated to use A...
Author: John Eppich
Table of Contents
About this DocumentTechnical DetailsConfiguring ISE-PICCreate a Common Join PointWSA pxGrid ConfigurationUsing an External CA ServerImport CA-Signed CertUpload WSA certificateEnable ISE External RESTful Serv...
Feb 2021 - please note this is on older pxGrid 1.0 technology. Vendors should be moving to pxGrid 2.0 and ISE 2.7 as latest recommended release.
pxGrid 1.0 will be going away and is only in maintenance mode as of ISE 3.0
This document should be arch...
This document is for Cisco Engineers and customers deploying Cisco Stealthwatch 6.9 with Cisco Identity Service Engine (ISE 2.2 using Cisco platform Exchange Grid (pxGrid). The reader should have some similarity with ISE and Cisco Stealthwatch and ...
Hi,It is recommended that the (2) pxGrid node are dedicated. However, I have seen deployments, where they are part of the MNT, PSN persona.If you have additional questions, please email me directly.Thanks,Johnjeppich@cisco.com
Hi,
This would require a certificate change, so it would affect other pxGrid deployments. You will need to re-configure your pxGrid clients to use the proper certificate.
Thanks,
John
jeppich@cisco.com
Hi,
Yup, this is a known bug and will be fixed in "CSCvr10059 ISE 2.4 P9 pxgrid with WSA: WSA not retrieving AD groups from ISE". Please provide your customer information to TAC, if you have not done so already.
Thanks,
John
jeppich@cisco.com