topic Re: Rapid Threat Containment in Network Security

Rapid Threat Containment

fatalXerror — Fri, 26 Jan 2024 10:38:52 GMT

Hi, just wondering, if I can still do Rapid Threat Containment if my FTD (firewall) and FTD (IPS) are separated? Those appliance will be integrated to ISE pxGrid node. Thanks

Re: Rapid Threat Containment

Rob Ingram — Fri, 26 Jan 2024 11:01:08 GMT

@fatalXerror I don't see why not as long as the FTD and NGIPS are managed by the FMC. When the FTD/NGIPS detect malicous traffic the FMC will learn this information and if configured can trigger an action by ISE to quarantine/apply a DACL etc on the endpoint.

Re: Rapid Threat Containment

MHM Cisco World — Fri, 26 Jan 2024 11:04:48 GMT

What you meaning separate

MHM

Re: Rapid Threat Containment

fatalXerror — Fri, 26 Jan 2024 11:06:34 GMT

Thanks @Rob Ingram

Re: Rapid Threat Containment

fatalXerror — Fri, 26 Jan 2024 11:07:42 GMT

Hi @MHM Cisco World , what I mean is the NGIPS function is separate from the firewall function of the FTD which means I will be having 1x appliance for firewall and 1x appliance for NGIPS functions.