cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
Announcements

Step-by-Step Configuration and Troubleshooting Best Practices for the NGFW, NGIPS and AMP Technologies A Visual Guide to the Cisco Firepower Threat Defense (FTD)
912
Views
0
Helpful
1
Replies
Highlighted
Beginner

Application whitelisting with Cisco IPS

Just wondering can Cisco IPS appliance 4360 do application whitelisting?

To my understanding event action filter is whitelisting based on source and destination IP address?

Everyone's tags (3)
1 ACCEPTED SOLUTION

Accepted Solutions

Application whitelisting with Cisco IPS

Hello,

That is correct event action filter is based on source and IP addresses, it cannot be used to map an specific application.

Regards,

Julio

Julio Carvajal
Senior Network Security and Core Specialist
CCIE #42930, 2xCCNP, JNCIP-SEC
1 REPLY 1

Application whitelisting with Cisco IPS

Hello,

That is correct event action filter is based on source and IP addresses, it cannot be used to map an specific application.

Regards,

Julio

Julio Carvajal
Senior Network Security and Core Specialist
CCIE #42930, 2xCCNP, JNCIP-SEC
CreatePlease to create content
Content for Community-Ad
August's Community Spotlight Awards