topic Re: Integration with Cisco ISE Pxgrid in General Topics

Integration with Cisco ISE Pxgrid

Transporter — Fri, 09 Feb 2018 15:51:27 GMT

Good afternoon!

Does anybody know the integration with Cisco ISE Pxgrid?

Does Palo Alto can act as pxGrid Client with Cisco ISE to apply TrustSec for SGT Bindings?
Does Palo Alto support Cisco SXP protocol and act as Listener to ISE Pxgrid speaker?

Thanks.

Re: Integration with Cisco ISE Pxgrid

Transporter — Mon, 12 Feb 2018 11:16:25 GMT

@reaper do you have ideas on this? Thanks.

Re: Integration with Cisco ISE Pxgrid

reaper — Mon, 12 Feb 2018 11:26:11 GMT

we do a little integration with cisco ISE for User-ID but I don't know about Pxgrid

Integrating Cisco ISE Guest Authentication with PAN-OS

we do some API and support syslog, but we don't support SXP directly to management

maybe @MarcosBuzo can chime in 🙂

Re: Integration with Cisco ISE Pxgrid

DB10 — Wed, 18 Jul 2018 03:13:50 GMT

Keep in mind that this will NOT work in a multi-domain environment with Cisco ISE 2.x. There is an ongoing Cisco Defect preventing integration. If you need this function, please add your company to the Cisco defect listed below. This will help us force Cisco to prioritise a fix. At the moment they allege we are the only organisation impacted. Please reply to the post on the Cisco Forums to advise you are impacted - https://supportforums.cisco.com/t5/aaa-identity-and-nac/are-you-impacted-ise-syslog-double-backslash/m-p/3417260

Defect Details

CSCvk09565 ISE 2.x onwards RFC 3164 is not being followed completely

Symptom

Syslog messages are sent with double slash in the username field.

Characters which are escaped with double slash are ,;{}\

Conditions

ISE 2.x version

Workaround

None

Further Problem Description

Below characters are escaped as of now

,;{}\

No Character should be escaped as per RFC 3164 which ISE follows.

Re: Integration with Cisco ISE Pxgrid

BorisJansen — Mon, 17 Dec 2018 08:43:11 GMT

Hi Transport

Do have now experience with Cisco ISE pxGrid intergration? Have you ever tried Gridmeld? https://github.com/PaloAltoNetworks/gridmeld

Best,

bob