Installing AV on the FMC and IronPort WSA VM itself

[AnastasiaLazareva]

I have a customer who needs the document for confirmation that it's not possible to install 3rd party AV software on FMC and IronPort WSA VM or appliance. Does anyone know of any documentation? Thank you for help!

[balaji.bandi]

What AV  ? WSA come with AV (sophos , mcafee, and webroot)

FMC is just management for FTD. so FTD is NGFW has good features.

[AnastasiaLazareva]

The question was about ANY possible AV. And the main issue of the customer is to protect this VM itself.

These .iso were provided by Cisco.

FMC is deployed like a VM and they want to protect this machine.

[balaji.bandi · Accepted solution]

Both come with pre-defined OS, i do not belive Cisco encourage to tamper adding AV in based OS Linux side.

I do not see what is the reason you looking to have AV on the VM ? if the customer more cautious about this VM, they can do network level scanning.

[rschlayer]

I am not sure if there is an official document which states that it is not possible to install an AV in the underlying Linux OS.

In FMC you probably could (via expert mode which gives you sudo rights) but these devices are hardened by cisco and specialized appliances.

They only install signed patches by cisco so not sure what the goal is here.