Can Arcsight do Rapid Threat Containment with ISE ?

[gvanbon]

Hi,

I know that Arcsight does not have PxGrid and uses syslog to integrate with ISE.

But can Arcsight do any RTC with ISE ? Maybe via a Rest Api ?

Cheers

[Craig Hyps · Accepted solution]

SmartConnector 6.0.7.6901 did add the Syslog parser functions, but not aware of any use of RTC.  Can they?  Yes.  Even without pxGrid they could choose to leverage the ANC API functions.

[Jason Kunst]

here are some threads as this was brought up before as well

https://communities.cisco.com/search.jspa?q=arcsight+ise+pxgrid

Please reach out to ISE & Arcsight product managers if you have customers asking for this