Rapid Threat Containment with ISE and FMC

Cisco Customer Success Specialist Jatin Katyal explains how Cisco ISE integrates with the Cisco Firepower Management Center (FMC) for both group-based firewall policy and Rapid Threat Containment (RTC).
00:00 Intro & Agenda
00:45 Integrate Security Controls
02:50 Zero Trust in the Workplace
- Establish Trust
- Enforce Trust
- Continuously Verify Trust
- Respond to Change in Trust
06:00 ISE Authentication & Authorization Methods
07:46 Cisco pxGrid for Sharing User+Endpoint Context
10:00 Context Sharing with pxGrid
11:54 Audience Poll Question
13:48 Demo: ISE and FMC Integration via pxGrid
15:03 - pxGrid Certificates
17:25 - FMC Integration with Identity Sources
19:17 Correction : All pxGrid communications occur within the secure pxGrid Channel. For MNT Server CA - The certificate should be the Root CA that signed the pxGrid cert of the MnT node.
22:52 - FMC Realm Configuration
23:50 - FMC Identity Policy
24:22 - FMC Access Control Policy
25:25 - Client Authentication and Connection Events
27:48 Rapid Threat Containment (RTC)
31:53 Adaptive Network Control (ANC) Service on ISE
32:44 Demo: Rapid Threat Containment
34:00 - Configure ANC policy on ISE
34:20 - Configure Remediation & Correlation on FMC
37:20 - Malware Trigger and Events Analysis
39:54 - ANC Endpoint Assignment
Resources:
cs.co/ise-guides
cs.co/ise-guides#FMC
cs.co/ise-guides#pxGrid