cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
Announcements
 
Register for the monthly ISE Webinars to learn about ISE configuration and deployment.
Choose one of the topics below to view our ISE Resources to help you on your journey with ISE

This community is for technical, feature, configuration and deployment questions.
For production deployment issues, please contact the TAC! We will not comment or assist with your TAC case in these forums.
Please see How to Ask the Community for Help for other best practices.

103
Views
0
Helpful
1
Replies
Cisco Employee

TC-NAC Impact qualification definition with CTA

Hi,

I would like to clarify the ISE Impact Qualification/Cource_of_Action and the CTA Incident Risk mapping.

In ISE there are 5 types of Impact Qualifications such as ...

  • 1 - Insignificant

  • 2 - Distracting

  • 3 - Painful

  • 4 - Damaging

  • 5 - Catastrophic

On the Other hand, in the CTA, it has 10 levels of incident risk.  Also, there are only 4 types of Course_Of_Action.

 

image.png

I assume that the mapping goes like follows. But I'm not sure. In CTA, it seems that there are only 4 types of incident risks, red, orange, amber, and sky blue.  

CTA Incident risk 10 -> ISE Impact Qualification: 5 - Catastrophic -> Cource_Of_Action Internal: Blocking

CTA Incident risk 9 (or 9 and 8?) -> ISE Impact Qualification: 4 - Damaging -> Cource_Of_Action: Eradication

...??

 

Are there any guides?

 

1 ACCEPTED SOLUTION

Accepted Solutions
Cisco Employee

Re: TC-NAC Impact qualification definition with CTA

Hi,

 

Email me directly, this is determined by the CTA development engineers.

 

Thanks,

John

jeppich@cisco.com

1 REPLY 1
Cisco Employee

Re: TC-NAC Impact qualification definition with CTA

Hi,

 

Email me directly, this is determined by the CTA development engineers.

 

Thanks,

John

jeppich@cisco.com