https://community.cisco.com/t5/network-security/ddos-protection/m-p/3879247#M923253 <P>Distributed Denial of Service (DDoS) protection is not a feature of Firepower Threat Defense, no matter what subscription level. Generally we look to external services (i.e. from your ISP or a third party) for such protection.</P> <P>On the very high end Firepower 4100 and 9300 series platforms we can optionally add an instance of Radware Virtual Defense Pro which does provide DDoS protection.&nbsp;</P> <P>&nbsp;</P> <P>Your second question is unclear. What are you asking about SSL encryption? SSL decryption is supported on all Firepower platforms but undertaking it on any significant scale requires a lot of processing power and comes with significant caveats.It 's usually easier to accomplish the organizational security goal via another method (or set of methods) such as endpoint protection (like Cisco AMP) and a secure Internet Gateway (like Cisco Umbrella).</P> Tue, 25 Jun 2019 13:23:44 GMT Marvin Rhoads 2019-06-25T13:23:44Z https://community.cisco.com/t5/network-security/ddos-protection/m-p/3879116#M923252 <P>Hi,</P><P>If I purchase the "ASA5525-FTD-K9, Full Firepower subscription" , Can I enable ddos Protection ?&nbsp;</P><P>Or even it works without firepower ?&nbsp;</P><P>2) does it support ssl encryption ?&nbsp;</P><P>Thanks&nbsp;</P> Fri, 21 Feb 2020 17:14:28 GMT https://community.cisco.com/t5/network-security/ddos-protection/m-p/3879116#M923252 elite2010 2020-02-21T17:14:28Z https://community.cisco.com/t5/network-security/ddos-protection/m-p/3879247#M923253 <P>Distributed Denial of Service (DDoS) protection is not a feature of Firepower Threat Defense, no matter what subscription level. Generally we look to external services (i.e. from your ISP or a third party) for such protection.</P> <P>On the very high end Firepower 4100 and 9300 series platforms we can optionally add an instance of Radware Virtual Defense Pro which does provide DDoS protection.&nbsp;</P> <P>&nbsp;</P> <P>Your second question is unclear. What are you asking about SSL encryption? SSL decryption is supported on all Firepower platforms but undertaking it on any significant scale requires a lot of processing power and comes with significant caveats.It 's usually easier to accomplish the organizational security goal via another method (or set of methods) such as endpoint protection (like Cisco AMP) and a secure Internet Gateway (like Cisco Umbrella).</P> Tue, 25 Jun 2019 13:23:44 GMT https://community.cisco.com/t5/network-security/ddos-protection/m-p/3879247#M923253 Marvin Rhoads 2019-06-25T13:23:44Z