Cisco ISE (Identity Services Engine) - SGA seed device?

[mtrcek]

Hi,

We are having LAB with Cisco ISE, certificates and DACL. Everything is working fine with version 1.1.1, but now we would like to use SGA-SGT functionality instead of ACL and we found that we need seed device for this and that the only device which supports this is Nexus 7000. Is that true? Is this the only way that we can use SGA-SGT? Are there any plans that any other device will be used for seed device?

BR,  Marko

[sean_evershed · Accepted solution]

The seed device defined as the first device that communicates with ISE. This needs to be a Nexus.

http://www.cisco.com/en/US/docs/solutions/Enterprise/Security/TrustSec_2.0/trustsec_2.0_dig.pdf

Furthermore the Nexus needs an Advanced Services license installed in order to support Trustsec.

I can't comment on any future plans.