Cisco ISE TME, Thomas Howard, show how ISE provides real-time updates of authenticated endpoints to security applications with pxGrid.
00:00 Intro and Agenda
01:43 ISE and Zero Trust with pxGrid
02:39 ISE Personas: PAN, MNT, PSN, PXG
03:26 ISE Node Services Explained
05:36 Demo: Cisco Secure Network Analytics Rapid Threat Containment with ISE
10:08 Endpoint Context
10:31 Cisco Security Technology Alliance Partners (CSTA) cisco.com/go/csta
10:47 pxGrid Context Sharing Scenarios
12:01 pxGrid 1.0 and 2.0 Support
12:39 What if the PAN is down?
13:09 Context: Build, Summarize, Exchange
14:26 Rapid Threat Containment example
15:19 Vulnerability Assessment (Threat-Centric NAC)
15:52 CSTA Partner Integration Details: cs.co/ise-ecos...
16:15 ISE Security Integration Guides: cs.co/ise-guides
16:33 Synchronous vs Asynchronous Eventing
17:26 Publishers and Subscribers
19:17 ISE 3.0+ API Gateway
20:25 Demo: Enable pxGrid, APIs, Default Network Device, and test auth in ISE
25:40 pxGrid Protocol Framework
26:50 pxGrid Services (Topics & APIs)
27:46 WebSockets & STOMP
28:30 Using pxGrid APIs
29:10 pxGrid Authentication & Authorization
29:35 Service Examples: session, trustsec, anc, endpoint.asset
32:51 Demo: pxGrid Python Scripting Environment: `pip`, `pipenv`, packages
35:35 Demo: curl REST API Example
37:07 Demo: Using Environment Variables
39:33 Demo: Using jq for JSON output formatting
40:11 Demo: pxGrid Username `AccountCreate` for (nodeName) and Password
42:00 Demo: pxGrid Username `AccountActivate` (Pending ... Enabled)
44:26 Demo: pxGrid `Authorization` query
45:11 Demo: pxGrid `ServiceLookup`
47:28 Demo: Cisco pxGrid GitHub Repository: github.com/cis...
48:08 Demo: pxgrid-util: `session-query-all`
50:00 Demo: pxgrid-util: `px-subscribe` with a session Stop (Disconnect) and Start
51:57 Cisco Platform Exchange Grid (pxGrid) in ISE Tutorial: cs.co/ise-pxgr...
53:00 ISE Resources :
ISE Webinars: cs.co/ise-webi...
ISE Resources: cs.co/ise-reso...
ISE Community: cs.co/ise-comm...
ISE Security Integration Guides: cs.co/ise-guides
ISE NAD Capabilities: cs.co/nad-capa...
Does ISE Support My Network Device?: cs.co/ise-my-nads
ISE Troubleshooting Tech Notes: cs.co/ise-trou...
ISE Licensing & Evaluations: cs.co/ise-lice...
53:11 pxGrid Code Resources :
Cisco pxGrid Client Software: cs.co/pxgrid-g... github.com/cisco-pxGrid
pxGrid Python Examples: `pip install pxgrid-util`
Cisco ISE on DevNet: cs.co/ise-devnet
Cisco pxGrid on DevNet: cs.co/pxgrid-d...
53:44 Questions:
Can ISE share user AD Group information with the Cisco Firewall?
Where is the endpoint data for pxGrid sourced from in ISE?
11 окт 2024