cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
276
Views
1
Helpful
1
Replies

Firepower 1120 DLP on Windows RDP

dasadmin
Level 1
Level 1

Hello

We have a Firepower 1120 device.  With IPS is it possible to monitor file copying over Windows RDP?

If so, can it correlate the user session to what files are copied?

Thanks

1 Reply 1

Marvin Rhoads
Hall of Fame
Hall of Fame

RDP communications are encrypted between client and server and thus the intermediate firewall has no visibility into the activity at that level of detail.

Review Cisco Networking for a $25 gift card