cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
505
Views
0
Helpful
2
Replies

Stealthwatch and automatic action to block threat?

Meddane
VIP
VIP

In the current version of Stealthwatch (Cisco Secure Network Analytics), is there a feature to take an action in order to block automatically threat, suspicious behavior of an IP address ?

2 Replies 2

Yes, the current version is 7.4 and I think the auto-remediation came out as a feature starting from 7.3.

How does stealthwatch block automatically an IP address or threat? Does it mean techniquely by sending instruction to routers switches firewalls and ISE to block this host?

Getting Started

Find answers to your questions by entering keywords or phrases in the Search bar above. New here? Use these resources to familiarize yourself with the community: