Integration with Cisco ISE Pxgrid

[Transporter]

Good afternoon!

Does anybody know the integration with Cisco ISE Pxgrid?

Does Palo Alto can act as pxGrid Client with Cisco ISE to apply TrustSec for SGT Bindings?
Does Palo Alto   support Cisco SXP protocol and act as Listener to ISE Pxgrid speaker?

Thanks.

[Transporter]

@reaper do you have ideas on this? Thanks.

[reaper]

we do a little integration with cisco ISE for User-ID but I don't know about Pxgrid

Integrating Cisco ISE Guest Authentication with PAN-OS

we do some API and support syslog, but we don't support SXP directly to management

maybe @MarcosBuzo can chime in 🙂

[DB10]

Keep in mind that this will NOT work in a multi-domain environment with Cisco ISE 2.x. There is an ongoing Cisco Defect preventing integration. If you need this function, please add your company to the Cisco defect listed below. This will help us force Cisco to prioritise a fix. At the moment they allege we are the only organisation impacted. Please reply to the post on the Cisco Forums to advise you are impacted - https://supportforums.cisco.com/t5/aaa-identity-and-nac/are-you-impacted-ise-syslog-double-backslash...

Defect Details

CSCvk09565 ISE 2.x onwards RFC 3164 is not being followed completely

Symptom

Syslog messages are sent with double slash in the username field.

Characters which are escaped with double slash are ,;{}\

Conditions

ISE 2.x version

Workaround

None

Further Problem Description

Below characters are escaped as of now

,;{}\

No Character should be escaped as per RFC 3164 which ISE follows.

[BorisJansen]

Hi Transport

Do have now experience with Cisco ISE pxGrid intergration? Have you ever tried Gridmeld? https://github.com/PaloAltoNetworks/gridmeld

Best,

bob