Integration with Cisco ISE Pxgrid

Reply
L3 Networker

Integration with Cisco ISE Pxgrid

Good afternoon!

 

Does anybody know the integration with Cisco ISE Pxgrid?

 

Does Palo Alto can act as pxGrid Client with Cisco ISE to apply TrustSec for SGT Bindings?
Does Palo Alto   support Cisco SXP protocol and act as Listener to ISE Pxgrid speaker?

 

Thanks.

L3 Networker

Re: Integration with Cisco ISE Pxgrid

@reaper do you have ideas on this? Thanks.

 

 

Community Manager

Re: Integration with Cisco ISE Pxgrid

we do a little integration with cisco ISE for User-ID but I don't know about Pxgrid

Integrating Cisco ISE Guest Authentication with PAN-OS

 

we do some API and support syslog, but we don't support SXP directly to management

 

maybe @MarcosBuzo can chime in :)


Help the community: Like helpful comments and mark solutions
Reaper out
L1 Bithead

Re: Integration with Cisco ISE Pxgrid

Keep in mind that this will NOT work in a multi-domain environment with Cisco ISE 2.x. There is an ongoing Cisco Defect preventing integration. If you need this function, please add your company to the Cisco defect listed below. This will help us force Cisco to prioritise a fix. At the moment they allege we are the only organisation impacted. Please reply to the post on the Cisco Forums to advise you are impacted - https://supportforums.cisco.com/t5/aaa-identity-and-nac/are-you-impacted-ise-syslog-double-backslash...

 

 

Defect Details

CSCvk09565 ISE 2.x onwards RFC 3164 is not being followed completely

 

Symptom

Syslog messages are sent with double slash in the username field.

 

Characters which are escaped with double slash are ,;{}\

 

Conditions

ISE 2.x version

 

Workaround

None

 

Further Problem Description

Below characters are escaped as of now

 

,;{}\

 

No Character should be escaped as per RFC 3164 which ISE follows.

L1 Bithead

Re: Integration with Cisco ISE Pxgrid

Hi Transport

 

Do have now experience with Cisco ISE pxGrid intergration? Have you ever tried Gridmeld? https://github.com/PaloAltoNetworks/gridmeld

 

Best,

bob

Tags (1)
Like what you see?

Show your appreciation!

Click Like if a post is helpful to you or if you just want to show your support.

Click Accept as Solution to acknowledge that the answer to your question has been provided.

The button appears next to the replies on topics you’ve started. The member who gave the solution and all future visitors to this topic will appreciate it!

These simple actions take just seconds of your time, but go a long way in showing appreciation for community members and the Live Community as a whole!

The Live Community thanks you for your participation!