Push SGTs from ISE to & fro from Meraki dashboard

[FlyingFrames]

We do not want to configure SGTs in two places i.e. Meraki dashboard & ISE. Is there a sync feature available?

Also if a client with an SGT does an anomalous behavior e.g. passing traffic to a geographical region not expected, how do we contain it using SGTs?

[MartinLL]

Yes.

https://community.cisco.com/t5/security-knowledge-base/ise-and-meraki-integration-for-the-sgt-policy...

You would need to use ANC on ISE and an external system that signals to ISE when a endpoint is not behaving correctly, then do an action based on that. 

[rhbirkelund]

Also, for SGTs/ Adaptive Policies, to be applied down the network, you need to have Adaptive Policy capable switches and access point throughout the network. 

That means C9k/MS390 or MS130/MS150 switches and AC Wave 2 or Wi-Fi 6/6E Access Points.