AMP Solution for file which are downloadd by IDM

jackk.rayen — Fri, 21 Feb 2020 05:02:19 GMT

Hi,

AMP for network can capture and inspect files which are transferred through ASA with firepower service , but when we test it with IDM(download the files with Download manager), AMP does not recognized these kind of Files,

so what is cisco approach for this situation ?? how we can inspect files which are transferred via IDM?

thanks

Jack, You need to install and

Farhan Mohamed — Tue, 31 Jan 2017 10:41:30 GMT

Jack, You need to install and launch ASDM which is the manager for FPWR. Exact name would be ASDM Launcher. I have listed the process below how to install and launch. This will help to investigate files as per your needs:-

Launch ASDM

See the ASDM release notes on Cisco.com for the requirements to run ASDM.

Procedure

1. On the computer connected to the ASA, launch a web browser.

2. In the Address field, enter the following URL: https://192.168.1.1/admin. The Cisco ASDM web page appears.

3. Click one of the available options: Install ASDM Launcher, Run ASDM, or Run Startup Wizard.

4. Follow the onscreen instructions to launch ASDM according to the option you chose. The Cisco ASDM-IDM Launcher appears.

If you click Install ASDM Launcher, in some cases you need to install an identity certificate for the ASA and a separate certificate for the ASA FirePOWER module according to Install an Identity Certificate for ASDM.

5. Leave the username and password fields empty, and click OK. The main ASDM window appears.

6. For ASDM module management only:

a. If you are prompted to provide the IP address of the installed ASA FirePOWER module, cancel out of the dialog box. You must first set the module IP address to the correct IP address using the Startup Wizard.

ASDM can change the ASA FirePOWER module IP address settings over the ASA backplane; but for ASDM to then manage the module, ASDM must be able to reach the module (and its new IP address) on the Management 1/1 interface over the network. The recommended deployment allows this access because the module IP address is on the inside network. If ASDM cannot reach the module on the network after you set the IP address, then you will see an error.

b. Choose Wizards > Startup Wizard.

c. Configure additional ASA settings as desired, or skip screens until you reach the ASA FirePOWER Basic Configuration screen.

Set the following values to work with the default configuration:

IP Address —192.168.1.2

Subnet Mask —255.255.255.0

Gateway —192.168.1.1

d. Click I accept the agreement, and click Next or Finish to complete the wizard.

e. Quit ASDM, and then relaunch. You should see ASA Firepower tabs on the Home page.

#Please rate be 5 if you like the answer, as 5 stars

topic AMP Solution for file which are downloadd by IDM in Endpoint Security

AMP Solution for file which are downloadd by IDM

Jack, You need to install and

Launch ASDM