brute Force attacks detection and prevention using FTD 2100

[Ahmed Sabanaa]

Dears, 

we need to block http website or application brute force attack using FTD , is it possible ? 

[balaji.bandi]

Hope below thread able to provide high level what you expect from FP

https://community.cisco.com/t5/network-security/firepower-2100-with-asa-software-syn-attack/m-p/4003053

[Mohammed al Baqari]

Hi,

General answer yes FTD has signatures to block brute force attacks on
supported protocols and supported applications. Having that said, you
shouldn't expect 100% block on any sensor because attackers usually tweak
their attempts algorithm to bypass lockout policies and prevention sensors
using techniques such as spray, etc. You can set your sensor to aggressive
detection but it will generate large false positives.

***** please remember to rate useful posts