Cisco ASA license

[Fury33]

Hi all I have a question:

I have a customer asking for Cisco FirePower licensing to help specifically with the C&C . He remembers the old ASA firewalls had a C&C license available to purchase/apply).

The specific PCI compliance they're trying to cover: PCI DSS v4.0: Requirement 11.5.1.1 Additional requirement for service providers only: Intrusion-detection and/or intrusion-prevention techniques detect, alert on/prevent, and address covert malware communication channels.

[balaji.bandi]

Not that aware any specific license for only CNC

look below config guide  and have right License you have to deploy :

https://www.cisco.com/c/en/us/td/docs/security/firepower/623/configuration/guide/fpmc-config-guide-v623/security_intelligence_blacklisting.html

[Marvin Rhoads]

The Threat paid term license is what you need with Cisco Secure Firewall Threat Defense (FTD).

Be sure to have an active Intrusion Policy for all your Allow rules and select all the Security Intelligence network and URL categories for use by your Access Control Policy. Also use Firepower recommendations and network discovery with a defined variable set to properly tune your Intrusion Policy.