To enable Cisco ISE to make authorization decisions based on threat and vulnerability attributes received from external sources, the pxGrid persona must be enabled. pxGrid (Platform Exchange Grid) is a Cisco ISE service that facilitates communication between ISE and third-party systems for the exchange of context-based information such as threat intelligence, vulnerabilities, and device posture.
How pxGrid Works:
1. pxGrid provides a framework for integrating external systems like threat intelligence platforms or vulnerability scanners with Cisco ISE.
2. These systems send threat and vulnerability data to Cisco ISE via pxGrid.
3. Cisco ISE uses this information to enforce dynamic authorization policies, such as quarantining or restricting access for compromised devices.