ASA 5520

[rlawson]

Does this device IDS system have a signature that detects and blocks Java/Python FTP Injections 

[Philip D'Ath]

The 5520 is getting a little long in the tooth.  Do you have the old IPS module for it?  If so you could probably craft something in that.

Otherwise I doubt you'll be able to do much with just a plain 5520.

You need someone more current like an ASA 5516 Firepower bundle combined with a TAMC licence.  Then it will block a million nasty things.

http://www.cisco.com/c/en/us/products/collateral/security/asa-5500-series-next-generation-firewalls/datasheet-c78-733916.html

[rlawson]

we have the IDS module installed on these devices.

Cisco Intrusion Prevention System, Version 7.1(11p1)E4

Signature Definition:

    Signature Update    S966.0            2017-02-16

just curious if the signatures on this device will block the Java/Python FTP Injections. Will be replacing these devices soon.