topic Minemeld Gridmeld Cisco ISE integration in General Topics

Minemeld Gridmeld Cisco ISE integration

JuergenHolzer — Fri, 25 Oct 2019 13:54:08 GMT

Hi,

recently we configured Minemeld with Gridmeld to fetch SGT-IP bindings from Cisco ISE over RestAPI (PxGrid). Minemeld is pushing the SGT-IP Bindings correctly into the dynamic object groups. However, we noticed the IP to tag bindings are sometimes missing from the Palo Alto (checked with "show object registered-IP all") and 1 minute later added again. During this time we can find the affected IP-tag binding on the Minemeld UI (in the Indicator Field) and on the ISE node. Looks like it is not stable so far.

Has anyone implemented this and experienced similar issues?

Re: Minemeld Gridmeld Cisco ISE integration

Molemo — Thu, 06 Aug 2020 16:41:47 GMT

I am trying to set this up on Redhat. We have Minemeld and PxGrid integration to ISE working because we can see the SGT tag-IP details pushed from ISE to PxGrid but the same data is not being pushed to the Palo Alto Firewall. Minemeld server is constantly sending SSL traffic to the Firewall successfully and we are able to make API calls from Minemeld to the Palo Alto Firewall but running the "show object registered-IP all" command does not return any data. Can someone advise how we can troubleshoot and verify if Minemeld is sending the required data to the Palo Alto Firewall.