What is supported in each CTR cloud instance? (Americas, EU, and APJC)

[diddly]

Question

I understand there are some differences in what is currently supported in CTR for Americas opposed to EU. Can you please confirm the differences and timing?

Answer

Cisco Threat Response (CTR) is available in 3 global regions. Customers from any region can self-provision accounts in Americas or Europe using Instant Access. Due to the way that CTR accesses data, customers will find CTR performant from any part of the world, giving freedom to use whichever cloud provides the features desired. Further, customers can easily configure product APIs to connect to any region. (Note that Umbrella centralizes geo settings within the dashboard). Here are the differences in each region:

	Americas	Europe	Asia Pacific
Instant Access	✓	✓	not yet committed
AMP for Endpoints	✓	✓	✓
Umbrella	✓	✓	✓
Threat Grid	✓	✓	connect to Americas or EU Threat Grid instance
Email	✓	Requires SMA 12.5 or ESA 13.0.0-314 (LD)	not yet committed
Web Security	✓	✓	not yet committed
Firepower	✓	Requires 6.5 for direct cloud eventing or 6.3+ to send via proxied syslog	not yet committed
Stealthwatch Enterprise	✓	✓	not yet committed

[askaerr]

FTD/FMC 6.5 does not exist for the moment. Does this mean direct cloud eventing is not supported (yet) for EU cloud?

You should work on getting the information synchronized on all places documentation is stored:

• Firepower CTR guide claims only North America is supported: https://www.cisco.com/c/en/us/td/docs/security/firepower/integrations/CTR/Firepower_and_Cisco_Threat_Response_Integration_Guide/send_events_to_the_cloud_directly.html
• This post claims EU is supported
• The supportforums FAQ states integration as from 6.3 is supported without mentioning regions: https://community.cisco.com/t5/security-documents/faqs-firepower-integration-with-cisco-threat-response/ta-p/3880441

[diddly]

That's correct. I'll check in with our doc experts on this, thank you.