cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
Announcements
 
ISE 2.3 Patch 7 has been posted. This will be the last patch for the ISE 2.3 release!
Choose one of the topics below to view our ISE Resources to help you on your journey with ISE

This community is for technical, feature, configuration and deployment questions.
For production deployment issues, please contact the TAC! We will not comment or assist with your TAC case in these forums.
Please see How to Ask the Community for Help for other best practices.

176
Views
0
Helpful
3
Replies
Highlighted
Beginner

What should I order if I want to add CTA adapter to ISE?

Hello everyone,

 

A client who bought the ISE Apex license want to use the CTA adapter for automatic mitigation actions, he is also using AMP for endpoint, so here is the question:

 

Does it requires additional CTA license for the CTA or the CTA is included just like the case in Stealthwatch?

 

Thanks.

1 ACCEPTED SOLUTION

Accepted Solutions
Cisco Employee

Re: What should I order if I want to add CTA adapter to ISE?

CTA can be integrated into ISE to take advantage of the TC-NAC system.  An ISE Apex license is required to enable the TC-NAC subsystem in ISE.

If your customer already has AMP for Endpoints, they should already have access to CTA.  WSA and Stealthwatch also offer this access.

 

Check here for more information:

https://community.cisco.com/t5/security-documents/ise-security-ecosystem-integration-guides/ta-p/3621164#toc-hId-155262917

3 REPLIES 3
Cisco Employee

Re: What should I order if I want to add CTA adapter to ISE?

CTA can be integrated into ISE to take advantage of the TC-NAC system.  An ISE Apex license is required to enable the TC-NAC subsystem in ISE.

If your customer already has AMP for Endpoints, they should already have access to CTA.  WSA and Stealthwatch also offer this access.

 

Check here for more information:

https://community.cisco.com/t5/security-documents/ise-security-ecosystem-integration-guides/ta-p/3621164#toc-hId-155262917

Cisco Employee

Re: What should I order if I want to add CTA adapter to ISE?

Thanks for the correction, forgot about AMP for endpoint to CTA. Will retract my response.

Beginner

Re: What should I order if I want to add CTA adapter to ISE?

Thank you Charlie!
Just a quick follow-up question. To my knowledge, CTA collects telemetry from WSA or Stealthwatch to calculate the score. In my client's case, he don't have WSA or Stealthwatch. I think you need to buy either one of them to complete the ISE TC-NAC architecture, is it correct?

Thanks again.