https://community.cisco.com/t5/network-security/asa-5520/m-p/3042665#M43127 <P>The 5520 is getting a little long in the tooth. &nbsp;Do you have the old IPS module for it? &nbsp;If so you could probably craft something in that.</P> <P></P> <P>Otherwise I doubt you'll be able to do much with just a plain 5520.</P> <P></P> <P>You need someone more current like an ASA 5516 Firepower bundle combined with a TAMC licence. &nbsp;Then it will block a million nasty things.</P> <P><A href="http://www.cisco.com/c/en/us/products/collateral/security/asa-5500-series-next-generation-firewalls/datasheet-c78-733916.html">http://www.cisco.com/c/en/us/products/collateral/security/asa-5500-series-next-generation-firewalls/datasheet-c78-733916.html</A></P> <P></P> Thu, 23 Feb 2017 00:34:55 GMT Philip D'Ath 2017-02-23T00:34:55Z https://community.cisco.com/t5/network-security/asa-5520/m-p/3042664#M43125 <P>Does this device IDS system have a signature that detects and blocks Java/Python FTP Injections&nbsp;</P> Sun, 10 Mar 2019 13:46:46 GMT https://community.cisco.com/t5/network-security/asa-5520/m-p/3042664#M43125 rlawson 2019-03-10T13:46:46Z https://community.cisco.com/t5/network-security/asa-5520/m-p/3042665#M43127 <P>The 5520 is getting a little long in the tooth. &nbsp;Do you have the old IPS module for it? &nbsp;If so you could probably craft something in that.</P> <P></P> <P>Otherwise I doubt you'll be able to do much with just a plain 5520.</P> <P></P> <P>You need someone more current like an ASA 5516 Firepower bundle combined with a TAMC licence. &nbsp;Then it will block a million nasty things.</P> <P><A href="http://www.cisco.com/c/en/us/products/collateral/security/asa-5500-series-next-generation-firewalls/datasheet-c78-733916.html">http://www.cisco.com/c/en/us/products/collateral/security/asa-5500-series-next-generation-firewalls/datasheet-c78-733916.html</A></P> <P></P> Thu, 23 Feb 2017 00:34:55 GMT https://community.cisco.com/t5/network-security/asa-5520/m-p/3042665#M43127 Philip D'Ath 2017-02-23T00:34:55Z https://community.cisco.com/t5/network-security/asa-5520/m-p/3042666#M43128 <P>we have the IDS module installed on these devices.</P> <P style="margin: 0in 0in 0pt;"><SPAN style="color: rgb(31, 73, 125);"><FONT face="Calibri">Cisco Intrusion Prevention System, Version 7.1(11p1)E4</FONT></SPAN></P> <P style="margin: 0in 0in 0pt;"><SPAN style="color: rgb(31, 73, 125);"><FONT face="Calibri">Signature Definition:</FONT></SPAN></P> <P style="margin: 0in 0in 0pt;"><SPAN style="color: rgb(31, 73, 125);"><FONT face="Calibri">&nbsp;&nbsp;&nbsp; Signature Update&nbsp;&nbsp;&nbsp; S966.0&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; 2017-02-16</FONT></SPAN></P> <P style="margin: 0in 0in 0pt;"><SPAN style="color: rgb(31, 73, 125);"><FONT face="Calibri">just curious if the signatures on this device will block the Java/Python FTP Injections. Will be replacing these devices soon.</FONT></SPAN></P> <P style="margin: 0in 0in 0pt;"><SPAN style="color: rgb(31, 73, 125);"><FONT face="Calibri">&nbsp;</FONT></SPAN></P> <P><FONT color="#000000" face="Times New Roman"> </FONT></P> Thu, 23 Feb 2017 13:41:57 GMT https://community.cisco.com/t5/network-security/asa-5520/m-p/3042666#M43128 rlawson 2017-02-23T13:41:57Z