Implementing and Configuring Cisco Identity Services Engine (SISE) — Question 290

An engineer is deploying Cisco ISE in a network that contains an existing Cisco Secure Firewall ASA. The customer requested that Cisco TrustSec be configured so that Cisco ISE and the firewall can share SGT information. Which protocol must be configured on Cisco ISE to meet the requirement?

Answer options

• A. RADUIS
• B. pxGrid
• C. PAC
• D. SXP

Correct answer: D

Explanation

The correct answer is D, SXP, as it is specifically designed for sharing Security Group Tag (SGT) information between Cisco ISE and other devices like firewalls. Options A (RADUIS), B (pxGrid), and C (PAC) do not facilitate the exchange of SGT information in the context of Cisco TrustSec.