Static Security Group Tag (SGT) for TrustSec
plugin | The Panorama plugin for Cisco TrustSec now provides support
for static SGT (Security Group Tags) retrieved from the Cisco ISE
server. The static SGTs are used in the same way dynamic SGTs are
currently used; IP addresses and tags are extracted and forwarded
to the Panorama plugin framework, which then pushes them to the firewalls.
Static SGTs can improve security posture when an endpoint does not
authenticate through Cisco ISE. |