300-715 · Question #364
An engineer is configuring a new Cisco ISE node. Context-sensitive information must be shared between the Cisco ISE and a Cisco ASA. Which persona must be enabled?
The correct answer is A. pxGrid. pxGrid (Platform Exchange Grid) (A) is Cisco's context-sharing framework that enables ISE to share identity and session context - such as user-to-IP mappings, SGT assignments, and session details - with third-party and Cisco security devices including the Cisco ASA. When pxGrid…
Question
An engineer is configuring a new Cisco ISE node. Context-sensitive information must be shared between the Cisco ISE and a Cisco ASA. Which persona must be enabled?
Options
- ApxGrid
- BAdministration
- CPolicy Service
- DMonitoring
How the community answered
(28 responses)- A93% (26)
- B4% (1)
- C4% (1)
Explanation
pxGrid (Platform Exchange Grid) (A) is Cisco's context-sharing framework that enables ISE to share identity and session context - such as user-to-IP mappings, SGT assignments, and session details - with third-party and Cisco security devices including the Cisco ASA. When pxGrid is enabled on ISE, the ASA can subscribe as a pxGrid client to receive real-time user identity information, which allows the ASA to apply identity-based firewall policies. The Policy Service persona (C) handles RADIUS/TACACS AAA processing. The Administration persona (B) manages configuration. The Monitoring persona (D) handles logging and reporting. None of these provide the context-sharing capability that pxGrid does.
Topics
Community Discussion
No community discussion yet for this question.