09-11-2019 01:41 AM - edited 02-21-2020 09:29 AM
i have observer every 30mints time frame FMC is connecting to "intelligence.sourcefire.com" web site its showing as outbound connection and uploading the data. how do we stop or disable this activity in FMC.
09-11-2019 02:15 AM
Actually ,
FMC Need Internet Server access to update service database find below URL for reference .
you will get info that which URL need for which reason.
09-11-2019 05:39 AM
If you want to disable the periodic Security Intelligence feed (which greatly reduces the effectiveness of your Firepower security appliances) you do it under Objects > Object Management > Security Intelligence (as shown below).
09-11-2019 07:14 AM
Thank you Marvin Rhoads.
sorry to bothering on this I have few more doubts.
1.when the selected feed is updating every 30 mints, the feeds are downloading from the website(Security Intelligence) its inbound connection right ? or it push the old feeds to website(Security Intelligence) and then update the feeds?
2. in my case it is showing the out bound connection like from FMC to website(Security Intelligence).
3. where can we see the what data it is uploading to website(Security Intelligence)?
09-11-2019 09:00 AM
FMC initiates the communications and the new feeds are downloaded from Cisco at the site name you mentioned earlier. It is not uploading your data. You can see the downloaded feeds in the FMC server under /var/sf/iprep_download
Reference this thread:
https://community.cisco.com/t5/firepower/how-to-view-the-security-intelligence-feeds/td-p/3074033
04-09-2021 07:26 AM - edited 04-10-2021 02:10 AM
@Marvin Rhoads wrote:If you want to disable the periodic Security Intelligence feed (which greatly reduces the effectiveness of your Firepower security appliances) you do it under Objects > Object Management > Security Intelligence (as shown below).
Do you recommend disabling it? I was looking for information online if it will be beneficial or not because I don't want to reduce the effectiveness of security appliance
04-09-2021 07:30 AM
I most definitely DO NOT recommend disabling it. As I noted earlier, that "greatly reduces the effectiveness of your Firepower security appliances"
Discover and save your favorite ideas. Come back to expert answers, step-by-step guides, recent topics, and more.
New here? Get started with these tips. How to use Community New member guide