cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
662
Views
0
Helpful
1
Replies

Firepower detects malware in FTP but doesnt detects in TFTP Transfer

malikyounas
Level 1
Level 1

I am  testing the firepower (ver. 6.0.0.1-26)  on ASA 5525X (9.5.3).

I have access control policy applied with file and malware policies in it which are to block malware.

I have an issue where a test a malware file transfer using TFTP isnt detected by the module and is allowed to pass through. However, module detects the file If I try to use FTP for file transfer.

Any idea why it would not detect using TFTP and how it detect when using FTP.

1 Reply 1

malikyounas
Level 1
Level 1

Found answer myself, only certrain protocols are supported for inspection and TFTP is not one of them.

Review Cisco Networking for a $25 gift card