Threat Centric NAC w/ AMP

[jpujol]

Hi,

I was about to prepare a demo for a large partner event, but based on the docs from last year, it seems that there isn't any way to have an AMP Threat event triggering automatically a quarantine action on ISE.

Am I wrong ? or is there anything new I could use to demonstrate the value of the ANC / AMP integration ? 

Thanks,

Jean-Francois

[Charlie Moreton · Accepted solution]

You could use the integration with Cisco Cognitive Threat Analytics

ISE Design & Integration Guides