cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
1009
Views
0
Helpful
1
Replies

[FirePOWER 8140] Emerging Threaths rules

Hi all, and thanks in advance for all the support.

My qestion is:

Is it possible to import Emerging Threath rules from https://rules.emergingthreatspro.com/ in my FirePOWER 8140 and let them update every day?

I do the same with a Security Onion adding the row 

rule_url=https://rules.emergingthreatspro.com/|emerging.rules.tar.gz|open-nogpl

in the pulledpork.conf file

Thanks,

Liberato

1 Reply 1

michael.arey1
Level 1
Level 1

Nope, I worked with Cisco on this for a couple weeks. FirePOWER devices will not accept a rule import with the Threshold Filter. It will error out and tell you Threshold constraint is depreciated and to use use Detection_Filter.

Review Cisco Networking products for a $25 gift card