cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
318
Views
0
Helpful
2
Replies
Beginner

How can Stealthwatch mitigate threats after ISE integration?

Hello,

 

I want to know what additional mitigation action can Stealthwatch do once I have integrated the ISE.

I know I can manually enforce the Adaptive Network Control Policy from the Stealthwatch web console and use the TrustSec Tags as search attributes from this document.

 

But I really want to confirm if the ANC policy can be automatically enforced once some alarms / anomalies has been detected. I knew similar question has been answered in this post 2 years ago, but what about the recent version of Stealthwatch??

 

The newest Console User's Guide still say the Java console can work with ASA and routers to bring out automatic mitigation, 

it would be really strange the newer Cisco FTD is not included and the ISE mitigation is manual only. 

 

Thank you.

 

 

 



Everyone's tags (2)
1 ACCEPTED SOLUTION

Accepted Solutions
Highlighted
Cisco Employee

Re: How can Stealthwatch mitigate threats after ISE integration?

Regarding wanting to know "if the [Stealthwatch] ANC policy can be automatically enforced once some alarms / anomalies has been detected.".  No. 

 

Stealthwatch requires that a user select and apply an ANC policy.  There is no 'automatic' enforcement in Stealthwatch.  

2 REPLIES 2
Highlighted
Cisco Employee

Re: How can Stealthwatch mitigate threats after ISE integration?

Regarding wanting to know "if the [Stealthwatch] ANC policy can be automatically enforced once some alarms / anomalies has been detected.".  No. 

 

Stealthwatch requires that a user select and apply an ANC policy.  There is no 'automatic' enforcement in Stealthwatch.  

Beginner

Re: How can Stealthwatch mitigate threats after ISE integration?

Thanks for the response and the confirmation.

I kind of know the SMC Desktop client is fading out, I guess you may take the automatic mitigation and FTD support parts as feature request.

Thank you again.
CreatePlease to create content
Content for Community-Ad
August's Community Spotlight Awards
This widget could not be displayed.