WEBVTT

1
00:00.000 --> 00:00.060 align:middle line:84%


2
00:00.060 --> 00:01.590 align:middle line:90%
The next product that
we're going to talk about

3
00:01.590 --> 00:03.330 align:middle line:90%
is really a
component of product.

4
00:03.330 --> 00:06.180 align:middle line:90%
What we're talking
about here is pxGrid.

5
00:06.180 --> 00:10.620 align:middle line:90%
And this is basically an API
programmability-based solution

6
00:10.620 --> 00:14.580 align:middle line:90%
that allows our Identity
Services Engine or other threat

7
00:14.580 --> 00:17.700 align:middle line:90%
response platforms to
communicate what's really going

8
00:17.700 --> 00:19.030 align:middle line:84%
on in our environment here.

9
00:19.030 --> 00:22.080 align:middle line:90%
This is a big deal, because
this is the exact method

10
00:22.080 --> 00:26.130 align:middle line:90%
that something like DNA Center
uses in order to integrate

11
00:26.130 --> 00:27.840 align:middle line:84%
with Cisco's ISE product.

12
00:27.840 --> 00:30.750 align:middle line:90%
This is how we can share
identity and authentication
WEBVTT
X-TIMESTAMP-MAP=LOCAL:00:00:00.000,MPEGTS:900000

12
00:27.840 --> 00:30.750 align:middle line:90%
This is how we can share
identity and authentication

13
00:30.750 --> 00:33.360 align:middle line:90%
and authorization services
all throughout our network

14
00:33.360 --> 00:35.580 align:middle line:90%
among other types
of ways that we

15
00:35.580 --> 00:38.790 align:middle line:90%
can integrate security products,
like AMP, into Cisco's ISE.

16
00:38.790 --> 00:40.650 align:middle line:84%
So let's talk more about pxGrid.

17
00:40.650 --> 00:44.220 align:middle line:90%
In yet another amazing
offering with a DevNet sandbox,

18
00:44.220 --> 00:48.720 align:middle line:90%
they actually give us a pxGrid
environment using Cisco ISE

19
00:48.720 --> 00:50.010 align:middle line:84%
that we can play with.

20
00:50.010 --> 00:52.710 align:middle line:90%
We can actually log
into ISE and see how

21
00:52.710 --> 00:54.220 align:middle line:84%
pxGrid could interact with it.

22
00:54.220 --> 00:57.180 align:middle line:90%
We also can create our
own automated scripts,

23
00:57.180 --> 00:59.880 align:middle line:90%
Python scripts, or so
on, to interact directly

24
00:59.880 --> 01:01.620 align:middle line:84%
with the pxGrid environment.
WEBVTT
X-TIMESTAMP-MAP=LOCAL:00:00:00.000,MPEGTS:900000

24
00:59.880 --> 01:01.620 align:middle line:84%
with the pxGrid environment.

25
01:01.620 --> 01:05.580 align:middle line:90%
That's if you want to explore
this automation capability.

26
01:05.580 --> 01:07.920 align:middle line:90%
But keep in mind,
again, the DNA Center

27
01:07.920 --> 01:13.470 align:middle line:90%
communicates to ISE using pxGrid
and in our DNA Center content.

28
01:13.470 --> 01:15.090 align:middle line:90%
What we have here
on CBT Nuggets,

29
01:15.090 --> 01:17.370 align:middle line:90%
implementing an SD
Access with DNA Center,

30
01:17.370 --> 01:21.750 align:middle line:90%
we actually walk through how to
integrate DNA Center with ISE

31
01:21.750 --> 01:22.650 align:middle line:84%
using pxGrid.

32
01:22.650 --> 01:23.550 align:middle line:84%
It's really easy.

33
01:23.550 --> 01:25.530 align:middle line:90%
It's basically just a
couple of checkboxes

34
01:25.530 --> 01:27.810 align:middle line:90%
where you just turn it on
and point the two appliances

35
01:27.810 --> 01:28.470 align:middle line:84%
to each other.

36
01:28.470 --> 01:31.440 align:middle line:90%
But that's the point
of pxGrid, is now
WEBVTT
X-TIMESTAMP-MAP=LOCAL:00:00:00.000,MPEGTS:900000

36
01:28.470 --> 01:31.440 align:middle line:90%
But that's the point
of pxGrid, is now

37
01:31.440 --> 01:35.130 align:middle line:90%
we can share authentication,
authorization,

38
01:35.130 --> 01:39.150 align:middle line:90%
and accounting information
from Cisco ISE using pxGrid.

39
01:39.150 --> 01:40.800 align:middle line:90%
Let's log in to the
front end and just

40
01:40.800 --> 01:42.940 align:middle line:84%
see what pxGrid can really do.

41
01:42.940 --> 01:46.060 align:middle line:90%
I'm already connected to the VPN
for this specific environment.

42
01:46.060 --> 01:48.540 align:middle line:90%
So I'll pop out the info
here, and we can see,

43
01:48.540 --> 01:50.970 align:middle line:90%
this is the username and
password that we need to be

44
01:50.970 --> 01:54.470 align:middle line:90%
using, as well as the
IP address 10.10.20.70.

45
01:54.470 --> 01:58.530 align:middle line:90%
So I'll go 10.10.20.70,
of course over https,

46
01:58.530 --> 02:01.830 align:middle line:90%
I'll click forward, and we
see the Cisco ISE log in comes
WEBVTT
X-TIMESTAMP-MAP=LOCAL:00:00:00.000,MPEGTS:900000

46
01:58.530 --> 02:01.830 align:middle line:90%
I'll click forward, and we
see the Cisco ISE log in comes

47
02:01.830 --> 02:02.580 align:middle line:84%
to life here.

48
02:02.580 --> 02:04.872 align:middle line:90%
Jumping back to the workspace,
I want to just make sure

49
02:04.872 --> 02:10.440 align:middle line:90%
my credentials here are admin,
and then capital C1sco12345!.

50
02:10.440 --> 02:16.830 align:middle line:90%
So we've got admin,
capital C1sco12345!.

51
02:16.830 --> 02:18.990 align:middle line:90%
I'll click Provide later
to this little pop up,

52
02:18.990 --> 02:20.340 align:middle line:84%
and I'll click Next.

53
02:20.340 --> 02:22.440 align:middle line:90%
We don't need to know
what's new in 2.7,

54
02:22.440 --> 02:24.670 align:middle line:90%
and let's just accept and
close this information

55
02:24.670 --> 02:26.700 align:middle line:90%
so we can get
started having fun.

56
02:26.700 --> 02:30.450 align:middle line:90%
So to get to the pxGrid
itself, what we want to look at
WEBVTT
X-TIMESTAMP-MAP=LOCAL:00:00:00.000,MPEGTS:900000

56
02:26.700 --> 02:30.450 align:middle line:90%
So to get to the pxGrid
itself, what we want to look at

57
02:30.450 --> 02:33.330 align:middle line:90%
is under Administration,
and then over here

58
02:33.330 --> 02:35.142 align:middle line:84%
under pxGrid services.

59
02:35.142 --> 02:36.600 align:middle line:90%
It's all the way
to the very right.

60
02:36.600 --> 02:37.975 align:middle line:90%
And this is where
we can actually

61
02:37.975 --> 02:40.050 align:middle line:84%
see what pxGrid can do.

62
02:40.050 --> 02:42.780 align:middle line:90%
What we see here is
a list of devices

63
02:42.780 --> 02:47.460 align:middle line:90%
that are allowed to connect
into ISE programmatically.

64
02:47.460 --> 02:49.950 align:middle line:90%
This is for automation
capabilities.

65
02:49.950 --> 02:53.752 align:middle line:90%
Now, we see things like
the administrator, the MMT.

66
02:53.752 --> 02:55.960 align:middle line:90%
That's going to be built
into it by default. In fact,

67
02:55.960 --> 02:58.590 align:middle line:90%
you basically see the
groups here are internal.

68
02:58.590 --> 03:01.380 align:middle line:90%
This is so that ISE can use
all sorts of different ways
WEBVTT
X-TIMESTAMP-MAP=LOCAL:00:00:00.000,MPEGTS:900000

68
02:58.590 --> 03:01.380 align:middle line:90%
This is so that ISE can use
all sorts of different ways

69
03:01.380 --> 03:05.070 align:middle line:90%
to, basically, communicate with
itself, as well as other types

70
03:05.070 --> 03:06.870 align:middle line:84%
of device architectures.

71
03:06.870 --> 03:09.450 align:middle line:90%
But then we see
the external users,

72
03:09.450 --> 03:11.448 align:middle line:84%
like John's MacBook, Mac O3.

73
03:11.448 --> 03:12.990 align:middle line:90%
And then John
apparently has a couple

74
03:12.990 --> 03:15.210 align:middle line:90%
of other MacBooks,
MacBook 1 and MacBook 2.

75
03:15.210 --> 03:18.740 align:middle line:90%
Now interestingly, you may be
seeing this thing, this xmpp

76
03:18.740 --> 03:19.950 align:middle line:84%
right here.

77
03:19.950 --> 03:24.000 align:middle line:90%
This is kind of the older way
that automated devices used

78
03:24.000 --> 03:26.130 align:middle line:84%
to communicate to Cisco ISE.

79
03:26.130 --> 03:28.080 align:middle line:84%
This is the Extensible--

80
03:28.080 --> 03:30.360 align:middle line:90%
I'm just going to put X
there, even though it's E-X--
WEBVTT
X-TIMESTAMP-MAP=LOCAL:00:00:00.000,MPEGTS:900000

80
03:28.080 --> 03:30.360 align:middle line:90%
I'm just going to put X
there, even though it's E-X--

81
03:30.360 --> 03:35.640 align:middle line:90%
extensible messaging
and presence protocol.

82
03:35.640 --> 03:40.470 align:middle line:90%
And this is how pxGrid, grid
the Platform Exchange Grid,

83
03:40.470 --> 03:43.080 align:middle line:90%
used to communicate to all
of our different devices

84
03:43.080 --> 03:46.440 align:middle line:90%
that needed to know what's
going on with ISE or identity

85
03:46.440 --> 03:47.400 align:middle line:84%
Services Engine.

86
03:47.400 --> 03:50.700 align:middle line:90%
So this could be a threat
intelligence device,

87
03:50.700 --> 03:54.490 align:middle line:90%
like Stealthwatch, or just
a network monitoring system.

88
03:54.490 --> 03:56.880 align:middle line:90%
This could even be an
asset management system

89
03:56.880 --> 04:00.630 align:middle line:90%
so that we know which user is
logging in to which device.
WEBVTT
X-TIMESTAMP-MAP=LOCAL:00:00:00.000,MPEGTS:900000

89
03:56.880 --> 04:00.630 align:middle line:90%
so that we know which user is
logging in to which device.

90
04:00.630 --> 04:03.480 align:middle line:90%
But because APIs
and programmability

91
04:03.480 --> 04:07.350 align:middle line:90%
have evolved over time,
sure enough, so has the API.

92
04:07.350 --> 04:09.930 align:middle line:90%
And now it can use just
a plain old REST API.

93
04:09.930 --> 04:12.330 align:middle line:90%
And that's exactly
how Cisco DNA Center

94
04:12.330 --> 04:14.850 align:middle line:90%
is going to be
communicating to Cisco ISE.

95
04:14.850 --> 04:17.070 align:middle line:90%
It's going to be
using this pxGrid,

96
04:17.070 --> 04:20.040 align:middle line:90%
and it's going to be using
the REST API variant of it.

97
04:20.040 --> 04:22.740 align:middle line:90%
That way when authentication
events happen,

98
04:22.740 --> 04:26.640 align:middle line:90%
Cisco DNA Center can track
who is logging in to which

99
04:26.640 --> 04:28.578 align:middle line:90%
virtual network from
which building where

100
04:28.578 --> 04:29.370 align:middle line:84%
in the environment.

101
04:29.370 --> 04:32.910 align:middle line:90%
And that's how it all streams
and correlates this information
WEBVTT
X-TIMESTAMP-MAP=LOCAL:00:00:00.000,MPEGTS:900000

101
04:29.370 --> 04:32.910 align:middle line:90%
And that's how it all streams
and correlates this information

102
04:32.910 --> 04:34.620 align:middle line:84%
back to the Assurance platform.

103
04:34.620 --> 04:37.410 align:middle line:90%
And that's what makes it really
easy to troubleshoot what's

104
04:37.410 --> 04:38.970 align:middle line:84%
going on with our end users.

105
04:38.970 --> 04:41.580 align:middle line:90%
It all starts right
here with the pxGrid.

106
04:41.580 --> 04:45.970 align:middle line:90%
And basically, any platform
can communicate into Cisco ISE,

107
04:45.970 --> 04:47.970 align:middle line:90%
as long as they're
authenticated and whitelisted

108
04:47.970 --> 04:49.960 align:middle line:90%
right here in the screen
that we're looking at.

109
04:49.960 --> 04:52.560 align:middle line:90%
And it can extract that
information out and work

110
04:52.560 --> 04:54.100 align:middle line:84%
with it programmatically.

111
04:54.100 --> 04:56.040 align:middle line:90%
So that's how we can
keep track of who

112
04:56.040 --> 04:58.560 align:middle line:90%
is in our environment, where
they're authenticating,

113
04:58.560 --> 05:00.570 align:middle line:90%
what devices are they
authenticating to,
WEBVTT
X-TIMESTAMP-MAP=LOCAL:00:00:00.000,MPEGTS:900000

113
04:58.560 --> 05:00.570 align:middle line:90%
what devices are they
authenticating to,

114
05:00.570 --> 05:04.022 align:middle line:90%
using Cisco's pxGrid as part
of the Cisco ISE platform.

115
05:04.022 --> 05:05.730 align:middle line:90%
I hope this has been
informative for you,

116
05:05.730 --> 05:08.270 align:middle line:90%
and I'd like to thank
you for viewing.