topic Re: Cisco Firepower external DBs supported in Network Security

Cisco Firepower external DBs supported

AlexPi — Fri, 21 Feb 2020 15:22:27 GMT

I am relatively new in using Firepower IPS and clearly using the internal/local database for all the logs makes the whole system too slow to search for events and obviously the window of backlog is too small. I would like to push all these logs to an external DB.

What are the supported SQL versions for Firepower Management 6.2.1?

Also it is my understanding that going with MSSQL is out of the window, which is bad since we have extensive MSSQL clustered environments.

Any advice would be greatly appreciated!

Re: Cisco Firepower external DBs supported

mikael.lahtela — Mon, 19 Mar 2018 20:53:43 GMT

Hi,

I would want to suggest you to look at eStreamer to send events to an external event logging.
https://www.cisco.com/c/en/us/td/docs/security/firepower/620/api/eStreamer/EventStreamerIntegrationGuide/Intro.html

br, Micke

Re: Cisco Firepower external DBs supported

AlexPi — Thu, 03 May 2018 09:48:28 GMT

Thanks for the suggestion! That looks pretty cool.

I guess I could keep a much longer backlog there, since ideally we want to be able to search up to 6 months back.