topic Re: Identity Collector and ISE in Firewall and Security Management

Identity Collector and ISE

Niklas_Davidsso — Tue, 02 Mar 2021 07:29:37 GMT

So i am trying to get Cisco ISE to give me IPS from its Security Group Tags.

I have the Identity Collector up, and its geting information from ISE and i can see in my Firewall that it gets the Tag, and IP

But the rules dont match!

And if i check in my Ise DC i can see the tags but i dont get any IPs like i do in Vmware!

Ise is V 3.0 patch 1

Mgmt is R81,

Firewall is also R81

Identity Collector R81 - runing a on win2019

Re: Identity Collector and ISE

Chris_Atkinson — Tue, 02 Mar 2021 12:40:58 GMT

Whilst sk134312 & sk108235 currently don't list ISE v3.0 could you please expand further on the JHF version & IDC agent build in use and we can review further.

Re: Identity Collector and ISE

Niklas_Davidsso — Tue, 02 Mar 2021 12:49:21 GMT

Hi Chris

JHF?

the IDC i guess you mean the Collector, that is runing 81.0002.0000

Re: Identity Collector and ISE

Chris_Atkinson — Tue, 02 Mar 2021 13:00:45 GMT

Jumbo Hotfix, the latest ongoing release for R81 is T17 available per sk170114

Note the latest IDC agent is 81.018.0000 available from sk134312

Re: Identity Collector and ISE

Niklas_Davidsso — Tue, 02 Mar 2021 13:02:42 GMT

MOITFW01> show installer packages installed
** ************************************************************************* **
** Connection error. Packages list might be incomplete **
** ************************************************************************* **
** ************************************************************************* **
** Hotfixes **
** ************************************************************************* **
Display name Type
Check_Point_R81_JUMBO_HF_MAIN_Bundle_T13_FULL.tgz Hotfix

Re: Identity Collector and ISE

Niklas_Davidsso — Tue, 02 Mar 2021 13:13:16 GMT

I mean i am runing 81.018.0000 🙂