Cisco ASA 5585-x SSP-10 with firepower

[rc00000011]

Hello,

I'd like to know if the cisco asa 5585-x with firepower support the antivirus or not?

I will be appreciated for all your helps 

Thank you 

[nspasov]

The FirePOWER blade on the 5585 can be licensed and configured for Network based AMP (Advanced Malware Protection):

http://www.cisco.com/c/en/us/products/security/advanced-malware-protection/index.html

In addition, you can purchase and configure AMP for endpoint:

http://www.cisco.com/c/en/us/products/security/fireamp-endpoints/index.html

I hope this helps!

Thank you for rating helpful posts!

[rc00000011]

Hello,

Thank you very much for your response , I found only the indication of the detection of advanced malware in the datasheet of Cisco Firepower.

I'd like to know if the firepower after the analyse of file generate an antivirus signature or not?

The Cisco ASA with Firepower support ssl decryption or not?

Thank you ,

[nspasov]

So the word "malware" is an umbrella for all sorts of bad files including viruses :) Cisco/FirePOWER computes a 256 hash value for every file that it sees. That hash value is then checked against the Cisco database. If the file is good/clean then it can be safely allowed through the network. If it is known bad/malware file then it can be dropped. If the file is unknown then FirePOWER can be configured to upload that file to the cloud sandbox so the file can be further examined. 

For your second question: Yes, you can do SSL decryption on the ASAs with FirePOWER. 

Thank you for rating helpful posts!