topic Re: brute Force attacks detection and prevention using FTD 2100 in Network Security

brute Force attacks detection and prevention using FTD 2100

Ahmed Sabanaa — Mon, 19 Oct 2020 13:41:56 GMT

Dears,

we need to block http website or application brute force attack using FTD , is it possible ?

Re: brute Force attacks detection and prevention using FTD 2100

balaji.bandi — Mon, 19 Oct 2020 14:02:24 GMT

Hope below thread able to provide high level what you expect from FP

https://community.cisco.com/t5/network-security/firepower-2100-with-asa-software-syn-attack/m-p/4003053

Re: brute Force attacks detection and prevention using FTD 2100

Mohammed al Baqari — Mon, 19 Oct 2020 15:42:37 GMT

Hi,

General answer yes FTD has signatures to block brute force attacks on
supported protocols and supported applications. Having that said, you
shouldn't expect 100% block on any sensor because attackers usually tweak
their attempts algorithm to bypass lockout policies and prevention sensors
using techniques such as spray, etc. You can set your sensor to aggressive
detection but it will generate large false positives.

***** please remember to rate useful posts