Cisco Identity Services Engine (ISE) is an endpoint-based network access and policy enforcement solution. The ExtraHop Cisco ISE integration enables you to combine ExtraHop anomaly detection with ISE Adaptive Network Control (ANC) to dynamically quarantine endpoints in response to security threats.
Similar to our integration with the Palo Alto Firewall, this solution adds IP or MAC addresses from specific ExtraHop detections or alerts to an ANC policy to quarantine the related endpoint.
The bundle includes two triggers: one for alerts and one for detections. You specify the alerts and detections you want the trigger to monitor and the ANC policy where they should be quarantined. The bundle also includes a dashboard that displays the total number of detection and alert events that were sent to the firewall, along with the IP addresses, MAC addresses, and names of the related devices.
Cisco Champion Radio · S7|E44: DevNet Specialization, Programmability and You!
Join this episode, featuring three Cisco partners, as they discuss the ins and outs of DevNet Specialization for partners.
DevNet Specialization is a catalyst for Cisco’s ecos...
If you wonder about Big Data and Analytics, the sessions below at Cisco Live Berlin will be for for you to attend. These sessions will cover what would need to know about Big Data, what are the latest technologies and tools for you to perform tasks of ana...
What does the term "data developer" mean? Apparently, it can mean different things to different people, in different contexts, at different times in history, or in different layers of a solution stack. It implies a developer who focuses on data applicatio...