ISE PXGrid Integrations

[jmcgourt@cisco.com]

An organisation I work with is building what they refer to as a ‘Pluggable Architecture’. 

After some initial research, they found technologies such as PxGrid, ICDx (Symantec), OpenDXL (IBM/OSA) & other open source message brokers as potential foundational enablers. They are looking for a deeper dive into XMPP in terms of how they can leverage pxGrid to become the controller to share contextual data with lots of non-Cisco technologies - do we have any documentation on the XMPP side of PXGrid and how it works with these other vendors? We would like more information on how to enable the eco-partner (for example, one such as Infoblox) to share contextual data - are there any documents that we can share on this?

[marce1000]

 https://www.cisco.com/c/en/us/products/collateral/security/identity-services-engine/white-paper-c11-735489.pdf

 M.

[Damien Miller · Accepted solution]

I would steer them away from XMPP formally referred to as pxGrid version 1 because it is getting dated and has more limited scale and HA capabilities. PxGrid version 2 leverages web sockets/rest api's over stomp 1.2, and addresses much of this.

There are some good resources on pxGrid over on the devnet site, developer.cisco.com.
https://developer.cisco.com/docs/pxgrid/

Cisco also maintains the Cisco Security Technical Alliance which is more focused on enabling vendors with their product integrations, @Jason Kunst is a TME there and is very familiar with ISE. You can probably reach "out" to him internally within Cisco for help too. 
https://www.cisco.com/c/m/en_us/products/security/technical-alliance-partners.html

[colbysunday]

I'm currently running into an issue with PxGrid integration with Infoblox. Has anyone successfully configured this integration using internal PKI? 

[Jason Kunst]

@colbysunday 

please start with http://cs.co/ise-guides

https://community.cisco.com/t5/security-documents/ise-security-ecosystem-integration-guides/ta-p/3621164#toc-hId-1476814793

Also look at section for 

Certificates / Private Key Infrastructure (PKI)

there is doc 

• Using ISE 2.2 Internal Certificate Authority (CA) to Deploy Certificates to Cisco pxGrid Clients

if all else fails reach out to the TAC