What should I order if I want to add CTA adapter to ISE?

[Support ACME]

Hello everyone,

A client who bought the ISE Apex license want to use the CTA adapter for automatic mitigation actions, he is also using AMP for endpoint, so here is the question:

Does it requires additional CTA license for the CTA or the CTA is included just like the case in Stealthwatch?

Thanks.

[Charlie Moreton · Accepted solution]

CTA can be integrated into ISE to take advantage of the TC-NAC system.  An ISE Apex license is required to enable the TC-NAC subsystem in ISE.

If your customer already has AMP for Endpoints, they should already have access to CTA.  WSA and Stealthwatch also offer this access.

Check here for more information:

https://community.cisco.com/t5/security-documents/ise-security-ecosystem-integration-guides/ta-p/3621164#toc-hId-155262917

[howon]

Thanks for the correction, forgot about AMP for endpoint to CTA. Will retract my response.

[Support ACME]

Thank you Charlie!
Just a quick follow-up question. To my knowledge, CTA collects telemetry from WSA or Stealthwatch to calculate the score. In my client's case, he don't have WSA or Stealthwatch. I think you need to buy either one of them to complete the ISE TC-NAC architecture, is it correct?

Thanks again.