topic Re: What is the feed mechanism and format to put into the cisco asa firewall in Network Security

What is the feed mechanism and format to put into the cisco asa firewall

Naina Emmanuel — Fri, 21 Feb 2020 15:49:27 GMT

May I know that if I want to input feeds (some logs) to Cisco ASA firewall then what would be the mechanism for that? And in which format these feeds can be given like stix, text, CSV or some other format.

Thanks

Re: What is the feed mechanism and format to put into the cisco asa firewall

Marvin Rhoads — Wed, 30 May 2018 07:57:19 GMT

An ASA firewall running ASA image cannot ingest threat feeds or syslogs.

If it's running a Firepower Service module or the FTD image, the managing Firepower Management Center (6.2 or above) can ingest STIX/Taxi feeds in addition to the Cisco Security Intelligence and send those down to the module for use in policies.

Re: What is the feed mechanism and format to put into the cisco asa firewall

Naina Emmanuel — Wed, 30 May 2018 08:05:39 GMT

Thanking!
Do we have any tutorial or mechanism guide to ingest feeds in Firepower Service module or FTD images?
Would be very helpful.

Re: What is the feed mechanism and format to put into the cisco asa firewall

Marvin Rhoads — Wed, 30 May 2018 08:11:09 GMT

You're welcome.

The feeds are ingested by FMC. The configuration guide covers the steps for setting this up:

https://www.cisco.com/c/en/us/td/docs/security/firepower/623/configuration/guide/fpmc-config-guide-v623/cisco_threat_intelligence_director__tid_.html