FP 6.0 and ISE integration for user awareness

[Krzysztof Grabowski]

Hi Team,

I am working with on a project to provide User Awareness for FirewPOWER 6.0 with pxGrid integration with ISE.

Can we use ISE to provide User to IP mappings using Identity Mapping feature without actually doing any 802.1x? In this scenario ISE would be purely used for reaching out to AD for user>IP (similar to CDA) and publishing it via pxGrid. My understanding is that Identity Mapping should work similarly to CDA on ISE and pxGrid integration should provide means to publish this information to FP.

Could please let me know if that is actually supported?

Cheers,

Christopher Grabowski

[Jason Kunst]

yes i am pretty sure this can be done, will reach out to SME to comment further

[jeppich · Accepted solution]

No, currently, this cannot be done. There are some issues with pxGrid identity mapping and the format on how FMC receives this information.

[Jason Kunst]

thanks jeppich please comment when this maybe supported when the information is public