topic #Threat-Detection Basic-Threat on FTD in Network Security

#Threat-Detection Basic-Threat on FTD

Monadnock — Tue, 19 Sep 2023 14:31:51 GMT

Hi, I have an audit that is picking up on the threat-detection CLI from an FTD show run and asking to change this:

#threat-detection basic-threat

#threat-detection advanced-threat

I obviously can't configure that within CLI and I don't see anywhere in the GUI to change threat-detection level to basic. I'm also a bit confused on all of the commands there - are they remnants of ASAs? Is packet rate limiting not done via Network Access Policy and/or the advanced tab under Access Control Policy?

Thanks!

Re: #Threat-Detection Basic-Threat on FTD

#Mat — Tue, 19 Sep 2023 15:54:38 GMT

Hi @Monadnock,

Yes, the service policy is in advanced settings. Have you tried with flexconfig?

Regards,

Re: #Threat-Detection Basic-Threat on FTD

#Mat — Tue, 19 Sep 2023 16:24:04 GMT

I've tried it in my lab FMC 7.0 and it didn't work. I wasn't able to change that configuration with Flexconfig.

Re: #Threat-Detection Basic-Threat on FTD

Monadnock — Tue, 19 Sep 2023 16:59:11 GMT

that's helpful thanks, I couldn't even find any documentation showing what that command would even do