topic Re: floodguard enable command Cisco Firepower in Network Security

floodguard enable command Cisco Firepower

harmesh88 — Mon, 01 Feb 2021 11:57:16 GMT

Dear Team ,

I have cisco firepower FMC in Virtual and FTD model is 2110

as per cisco community search we came to know that Floodgaurd feature is enabled by default with this device

My question is how can we enable it and if its enabled so how can we see status of this feature - is there any command for checking it ?

Re: floodguard enable command Cisco Firepower

Mohammed al Baqari — Mon, 01 Feb 2021 12:34:48 GMT

Hi, floodguard is always enabled and can't be disabled since PIX 7.0. If
you try to push the config using flexconfig, it will give an error that its
always enabled.

I don't think there is a command to display its output in ASA/FTD

***** please remember to rate useful posts

Re: floodguard enable command Cisco Firepower

harmesh88 — Wed, 03 Feb 2021 08:55:29 GMT

Ok So its already enabled .

Actually its audit point of view i want to know that this feature is enabled in my device .

So please let me know if any possibility to view status of this feature .

or for proof any document link

Re: floodguard enable command Cisco Firepower

Marvin Rhoads — Wed, 03 Feb 2021 09:27:19 GMT

You auditor is either working with a very old set of requirements or incorrectly applying a switching requirement to your ASA device. (The floodguard command is still supported on switches and is required for DISA STIG compliance.)

The only confirmation I was able to find that it is is built into ASA by default is an old Cisco document last updated almost 5 years ago. Reference:

https://www.cisco.com/c/en/us/support/docs/security/pix-500-series-security-appliances/91976-migrate-pix-to-asa.html#ert

Re: floodguard enable command Cisco Firepower

Mohammed al Baqari — Wed, 03 Feb 2021 10:53:53 GMT

Agreed with @Marvin Rhoads are outdated. They are looking for floodguard in
FTD !!! There are a lot of security features to be considered in FTD other
than this.

I had similar case recently where a large audit organization was auditing
FTD using ASA config. Useless activity if they are not up to date.