cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
Announcements

This community is for technical, feature, configuration and deployment questions.
For production deployment issues, please contact the TAC! We will not comment or assist with your TAC case in these forums.
Please see How to Ask the Community for Help for other best practices.

615
Views
0
Helpful
2
Replies
Highlighted
Enthusiast

Rapid Threat Containment on ISE with Stealthwatch Cloud integration

Is Rapid Threat Containment (RTC) supported with ISE and Stealthwatch Cloud integration? I know this is available on Stealthwatch enterprise where an endpoint can be isolated in ISE via the SW management console. However is this also possible in SW Cloud deployments? There is no mention of this in the SW Cloud ISE integration guide and it seems that only enrichment is possible on SW getting user attribution data from ISE.

1 ACCEPTED SOLUTION

Accepted Solutions
Highlighted
Cisco Employee

Stealthwatch Cloud does not support this currently.  It could, but feedback suggests that very few customers would allow a cloud app to connect directly to their ISE cluster. Interested in anyone's opinion on that.

View solution in original post

2 REPLIES 2
Highlighted
Cisco Employee

Stealthwatch Cloud does not support this currently.  It could, but feedback suggests that very few customers would allow a cloud app to connect directly to their ISE cluster. Interested in anyone's opinion on that.

View solution in original post

Highlighted

Thanks for the confirmation.

Content for Community-Ad