Cisco Community
English
Register
Register
cancel
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for 
Search instead for 
Did you mean: 
cancel
Announcements

This community is for technical, feature, configuration and deployment questions.
For production deployment issues, please contact the TAC! We will not comment or assist with your TAC case in these forums.
Please see How to Ask the Community for Help for other best practices.

615
Views
0
Helpful
2
Replies
Highlighted
Madura Malwatte
Enthusiast
Enthusiast
‎11-10-2020 04:43 AM
‎11-10-2020 04:43 AM

Rapid Threat Containment on ISE with Stealthwatch Cloud integration

Is Rapid Threat Containment (RTC) supported with ISE and Stealthwatch Cloud integration? I know this is available on Stealthwatch enterprise where an endpoint can be isolated in ISE via the SW management console. However is this also possible in SW Cloud deployments? There is no mention of this in the SW Cloud ISE integration guide and it seems that only enrichment is possible on SW getting user attribution data from ISE.

0 Helpful
Reply
1 ACCEPTED SOLUTION

Accepted Solutions
Highlighted
jeaves@cisco.com
Cisco Employee
Cisco Employee
‎11-13-2020 05:04 AM
‎11-13-2020 05:04 AM

Stealthwatch Cloud does not support this currently.  It could, but feedback suggests that very few customers would allow a cloud app to connect directly to their ISE cluster. Interested in anyone's opinion on that.

View solution in original post

0 Helpful
Reply
2 REPLIES 2
Highlighted
jeaves@cisco.com
Cisco Employee
Cisco Employee
‎11-13-2020 05:04 AM
‎11-13-2020 05:04 AM

Stealthwatch Cloud does not support this currently.  It could, but feedback suggests that very few customers would allow a cloud app to connect directly to their ISE cluster. Interested in anyone's opinion on that.

View solution in original post

0 Helpful
Reply
Highlighted
Madura Malwatte
Enthusiast
Enthusiast
In response to jeaves@cisco.com
‎11-17-2020 06:15 AM
‎11-17-2020 06:15 AM

Thanks for the confirmation.

0 Helpful
Reply
Latest Contents
SecureX Frequently Asked Questions
Created by adisanka on 03-01-2021 08:33 AM
0
10
0
10
GeneralWhich Cisco Secure products include access to SecureX?What are the SecureX data retention/privacy policies?What is SSE?How can I unlink my smart account from SSE and link it to a new account?Do I have to use the same SSE region as the SecureX regio... view more
Bridge the security gap with Cisco Remote Secure Worker
Created by Kelli Glass on 02-26-2021 04:37 PM
0
0
0
0
More people are working remotely, and this increases the risk of security breaches and the difficulty in defending remote workers where they work and securing the devices they use. Learn about Cisco Remote Secure Worker solutions that verify workers, secu... view more
ISE Performance & Scale
Created by howon on 02-24-2021 08:26 PM
11
219
11
219
  GeneralWhich Cisco Secure products include access to SecureX?What are the SecureX data retention/privacy policies?What is SSE?How can I unlink my smart account from SSE and link it to a new account?Do I have to use the same SSE region as the Secur... view more
Detecting and Responding to the SolarWinds Infrastructure At...
Created by aligarci on 02-23-2021 08:19 AM
0
5
0
5
On December 8, FireEye reported that it had been compromised in a sophisticated supply chain attack: more specifically through the SolarWinds Orion IT monitoring and management software. The attackers leveraged business software updates in order to distr... view more
Arista CloudVision WiFi Dictionary and NAD Profile for ISE I...
Created by hslai on 02-21-2021 01:59 PM
0
10
0
10
Attached are the dictionary and NAD profile as described in Arista CloudVision WiFi Integration with Cisco ISE .
Content for Community-Ad