Рет қаралды 6,343
Cisco ISE TME, Thomas Howard, show how ISE provides real-time updates of authenticated endpoints to security applications with pxGrid.
00:00 Intro and Agenda
01:43 ISE and Zero Trust with pxGrid
02:39 ISE Personas: PAN, MNT, PSN, PXG
03:26 ISE Node Services Explained
05:36 Demo: Cisco Secure Network Analytics Rapid Threat Containment with ISE
10:08 Endpoint Context
10:31 Cisco Security Technology Alliance Partners (CSTA) cisco.com/go/csta
10:47 pxGrid Context Sharing Scenarios
12:01 pxGrid 1.0 and 2.0 Support
12:39 What if the PAN is down?
13:09 Context: Build, Summarize, Exchange
14:26 Rapid Threat Containment example
15:19 Vulnerability Assessment (Threat-Centric NAC)
15:52 CSTA Partner Integration Details: cs.co/ise-ecosystem-partners
16:15 ISE Security Integration Guides: cs.co/ise-guides
16:33 Synchronous vs Asynchronous Eventing
17:26 Publishers and Subscribers
19:17 ISE 3.0+ API Gateway
20:25 Demo: Enable pxGrid, APIs, Default Network Device, and test auth in ISE
25:40 pxGrid Protocol Framework
26:50 pxGrid Services (Topics & APIs)
27:46 WebSockets & STOMP
28:30 Using pxGrid APIs
29:10 pxGrid Authentication & Authorization
29:35 Service Examples: session, trustsec, anc, endpoint.asset
32:51 Demo: pxGrid Python Scripting Environment: `pip`, `pipenv`, packages
35:35 Demo: curl REST API Example
37:07 Demo: Using Environment Variables
39:33 Demo: Using jq for JSON output formatting
40:11 Demo: pxGrid Username `AccountCreate` for (nodeName) and Password
42:00 Demo: pxGrid Username `AccountActivate` (Pending ... Enabled)
44:26 Demo: pxGrid `Authorization` query
45:11 Demo: pxGrid `ServiceLookup`
47:28 Demo: Cisco pxGrid GitHub Repository: github.com/cisco-pxgrid/pytho...
48:08 Demo: pxgrid-util: `session-query-all`
50:00 Demo: pxgrid-util: `px-subscribe` with a session Stop (Disconnect) and Start
51:57 Cisco Platform Exchange Grid (pxGrid) in ISE Tutorial: cs.co/ise-pxgrid-tutorial
53:00 ISE Resources :
ISE Webinars: cs.co/ise-webinars
ISE Resources: cs.co/ise-resources
ISE Community: cs.co/ise-community
ISE Security Integration Guides: cs.co/ise-guides
ISE NAD Capabilities: cs.co/nad-capabilities
Does ISE Support My Network Device?: cs.co/ise-my-nads
ISE Troubleshooting Tech Notes: cs.co/ise-troubleshooting
ISE Licensing & Evaluations: cs.co/ise-licensing
53:11 pxGrid Code Resources :
Cisco pxGrid Client Software: cs.co/pxgrid-github github.com/cisco-pxGrid
pxGrid Python Examples: `pip install pxgrid-util`
Cisco ISE on DevNet: cs.co/ise-devnet
Cisco pxGrid on DevNet: cs.co/pxgrid-devnet
53:44 Questions:
- Can ISE share user AD Group information with the Cisco Firewall?
- Where is the endpoint data for pxGrid sourced from in ISE?