Network Communications Matrix AMP deployment

Simon Rittner — Fri, 21 Feb 2020 05:05:00 GMT

Hi folks,

we want to set up an AMP for network deployment with Private Cloud appliance, Threat Grid Appliance and FMC in a critical customer´s environment. Of course - security comes first - so there are many security zones and firewalls already in place.

The Firepower appliances and other components will be spread all over the network and security zones..

Which ports and communications are beeing used in between the Firepower Appliances, FMC, Threat Grid Appliance and Privat Cloud Appliance?

Will the file hash lookup be executed by the FMC or directly by each Firpower Appliance?

Is there any communications matrix within documentation that we missed?

We would appreciate any hint on this matter..

Cheers!

Re: Network Communications Matrix AMP deployment

yogdhanu — Wed, 20 Dec 2017 18:34:01 GMT

Hello,

I assume its already been done, But I will try to answer.

To start with, here are 2 guide for AMP VPC and TG.

Cisco Threat Grid - Install and Upgrade Guides - Cisco

https://www.cisco.com/c/en/us/support/docs/security/sourcefire-fireamp-private-cloud-virtual-appliance/118336-configure-fireampprivatecloud-00.html

To answer your question, FMC and AMP VPC would communicate to threatgrid clean interface for sand-boxing.

Firepower sensor would directly talk to TG box for dynamic analysis clean interface.

Hash lookup is done from FMC to AMP VPC. FMC does also communicate to TG clear interface for dynamic analysis.

Thanks

Yogesh

topic Network Communications Matrix AMP deployment in Endpoint Security

Network Communications Matrix AMP deployment

Re: Network Communications Matrix AMP deployment