cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
Announcements

This community is for technical, feature, configuration and deployment questions.
For production deployment issues, please contact the TAC! We will not comment or assist with your TAC case in these forums.
Please see How to Ask the Community for Help for other best practices.

1941
Views
0
Helpful
3
Replies
Support ACME
Beginner

What should I order if I want to add CTA adapter to ISE?

Hello everyone,

 

A client who bought the ISE Apex license want to use the CTA adapter for automatic mitigation actions, he is also using AMP for endpoint, so here is the question:

 

Does it requires additional CTA license for the CTA or the CTA is included just like the case in Stealthwatch?

 

Thanks.

1 ACCEPTED SOLUTION

Accepted Solutions
Charlie Moreton
Cisco Employee

CTA can be integrated into ISE to take advantage of the TC-NAC system.  An ISE Apex license is required to enable the TC-NAC subsystem in ISE.

If your customer already has AMP for Endpoints, they should already have access to CTA.  WSA and Stealthwatch also offer this access.

 

Check here for more information:

https://community.cisco.com/t5/security-documents/ise-security-ecosystem-integration-guides/ta-p/3621164#toc-hId-155262917

View solution in original post

3 REPLIES 3
Charlie Moreton
Cisco Employee

CTA can be integrated into ISE to take advantage of the TC-NAC system.  An ISE Apex license is required to enable the TC-NAC subsystem in ISE.

If your customer already has AMP for Endpoints, they should already have access to CTA.  WSA and Stealthwatch also offer this access.

 

Check here for more information:

https://community.cisco.com/t5/security-documents/ise-security-ecosystem-integration-guides/ta-p/3621164#toc-hId-155262917

Thanks for the correction, forgot about AMP for endpoint to CTA. Will retract my response.

Thank you Charlie!
Just a quick follow-up question. To my knowledge, CTA collects telemetry from WSA or Stealthwatch to calculate the score. In my client's case, he don't have WSA or Stealthwatch. I think you need to buy either one of them to complete the ISE TC-NAC architecture, is it correct?

Thanks again.
Create
Recognize Your Peers
Content for Community-Ad

ISE Webinars


Miss a previous ISE webinar?
Never miss one again!

CiscoISE on YouTube