topic Re: FTD vulnerability scanning? in Network Security

FTD vulnerability scanning?

Knassi — Wed, 19 Apr 2023 20:07:32 GMT

Do Cisco FTDs do vulnerability scan on the the devices on the network?

Re: FTD vulnerability scanning?

MHM Cisco World — Wed, 19 Apr 2023 20:26:03 GMT

check NMAP are it what you looking for ?

Re: FTD vulnerability scanning?

Marvin Rhoads — Thu, 20 Apr 2023 04:08:12 GMT

Not a true vulnerability scan, but you can use the built-in nmap to do more thorough network/host discovery which informs the IPS (Snort) rules for greater efficacy.

Details here: https://www.cisco.com/c/en/us/td/docs/security/firepower/70/configuration/guide/fpmc-config-guide-v70/host_identity_sources.html#ID-2219-00000532

FMC does work with third party vulnerability scanners via the host input API and can be configured using correlation rules to take action on a host identified to have vulnerabilities.

Re: FTD vulnerability scanning?

Knassi — Thu, 20 Apr 2023 12:26:02 GMT

Thank you so much Marvin