User Notification after getting quarantine from Stealthwatch

[Jay Tiwari]

Hi Experts,

My customer has integrated ISE and Stealthwatch SMC and looking for automatic user notification after getting quarantine from SMC.

Is it possible to send email notification?

Can we do portal (like Hotspot or static web page) redirection?

Regards,

Jay

[hslai · Accepted solution]

ISE has no direct way to send email on such events. However, we might be able to create/customize an alarm that alerts on hitting an authorization rule for quarantine.

Yes, the resulting authorization profile may have Cisco AVPs for a URL redirect.