Cisco Threat Response Module Matrix

[ben.greenbaum]

• Question

What are the capabilities of, and licensing requirements for, each of the current modules that integrate Cisco and third party products and threat intelligence into Cisco Threat Response?

Answer: see attached PDF for a quick reference guide.

[Dan Eyster]

Ben,

Will this page be updated as new integrations are added to CTR?

Thanks!

Dan

[ben.greenbaum]

Yes Dan it will. 

[Troja007]

Great @ben.greenbaum, and thanks for this!

[askaerr]

Hi,

Does CES integration work the same way as SMA integration? Do we need to add it as an on-premise device in the SSE?

Thanks,

A

[hongleli]

Great stuff, thanks for sharing. @ben.greenbaum 

[Craig Rees]

Will other 3rd party tools besides VirusTotal be available to add as modules at some point

[ben.greenbaum]

@askaerr - my apologies; I did not see your question until now.

Yes it's the same. Please see the ESA/SMA/CES CTR integration FAQ here: https://community.cisco.com/t5/security-documents/email-security-what-capabilities-does-it-provide-and-how-can-i/ta-p/3986652

[ben.greenbaum]

@Craig Rees Who can say what the future will bring :D
But yes, I would expect more 3rd party integrations of all kinds, including other data sources that can be leveraged via modules.
There are currently none on the immediate roadmap, but the capability was built into Threat Response for that reason.