cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
Announcements
 
Register for the monthly ISE Webinars to learn about ISE configuration and deployment.
Choose one of the topics below to view our ISE Resources to help you on your journey with ISE

This community is for technical, feature, configuration and deployment questions.
For production deployment issues, please contact the TAC! We will not comment or assist with your TAC case in these forums.
Please see How to Ask the Community for Help for other best practices.

62
Views
0
Helpful
1
Replies
Cisco Employee

User Notification after getting quarantine from Stealthwatch

Hi Experts,

My customer has integrated ISE and Stealthwatch SMC and looking for automatic user notification after getting quarantine from SMC.

Is it possible to send email notification?

Can we do portal (like Hotspot or static web page) redirection?

 

Regards,

Jay

 

1 ACCEPTED SOLUTION

Accepted Solutions
Cisco Employee

Re: User Notification after getting quarantine from Stealthwatch

ISE has no direct way to send email on such events. However, we might be able to create/customize an alarm that alerts on hitting an authorization rule for quarantine.

Yes, the resulting authorization profile may have Cisco AVPs for a URL redirect.

1 REPLY 1
Cisco Employee

Re: User Notification after getting quarantine from Stealthwatch

ISE has no direct way to send email on such events. However, we might be able to create/customize an alarm that alerts on hitting an authorization rule for quarantine.

Yes, the resulting authorization profile may have Cisco AVPs for a URL redirect.