Firepower virtual and filtering inside SSH packets

[jimmycher]

We use AWS and Cisco Secure Firewall Threat Defense Virtual (formerly FTDv or NGFWv).

Some of our data transfers use SFTP (SSH). 

Can we do DPI?  Can we do it without changing the source/destination fields?

Background info would be appreciated.

Thanks

jc

 

[Milos_Jovanovic]

Hi @jimmycher,

SSH inspection is not possible on FTD, as far as I know.

Kind regards,

Milos