Firepower FMC browser version accuracy

evan.chadwick1 — Fri, 21 Feb 2020 16:27:06 GMT

Hi Folks,

anyone have experience with how to search all the hosts running vulnerable browsers?

for eg, if I run the templated report 'Network Risk Report' it has a section

"dangerous web browser versions"

How do I search within my hosts to pull up a report of which ones are running these versions?

If I generate a report using the 'web browser versions' it gives me a 'count' column, but this is just a number of hosts running the version.

Also how accurate is this? Is it 'best effort' like operating system guesses?

Re: Firepower FMC browser version accuracy

evan.chadwick1 — Thu, 08 Nov 2018 22:58:44 GMT

Investigating with the server team via SCCM shows no versions under IE 11.

Likewise with Chrome.

I'd say use Firepower data, such OS and Browser types, not as a driver to start investigations, but as an extra place for a bit of data.

Ie if another system says there is vulnerable browsers then start an investigation.