Rapid Threat Containment

[fatalXerror]

Hi, just wondering, if I can still do Rapid Threat Containment if my FTD (firewall) and FTD (IPS) are separated? Those appliance will be integrated to ISE pxGrid node. Thanks

[Rob Ingram · Accepted solution]

@fatalXerror I don't see why not as long as the FTD and NGIPS are managed by the FMC. When the FTD/NGIPS detect malicous traffic the FMC will learn this information and if configured can trigger an action by ISE to quarantine/apply a DACL etc on the endpoint.

[fatalXerror]

Thanks @Rob Ingram 

[MHM Cisco World]

What you meaning separate 

MHM

[fatalXerror]

Hi @MHM Cisco World , what I mean is the NGIPS function is separate from the firewall function of the FTD which means I will be having 1x appliance for firewall and 1x appliance for NGIPS functions.