Firepower IPS Health Check procedure

[Mady]

Hi Team,

I am planning to conduct a health check on our Firepower IPS. Could you please help me guys on how to do this and what are the necessary information that I need to check or gather on our IPS. 

Thank you very much!

Regards,

Mady

[Aastha Bhardwaj]

Hi,

I am not sure when you say health what exactly you are looking for. Health is by default monitored by the Defense Center if your Firepower is being managed by it and you have pushed the health policy on it . You will actually see alerts coming up in case there are any issues with the Firepower.

Check : http://www.cisco.com/c/en/us/td/docs/security/firesight/541/user-guide/FireSIGHT-System-UserGuide-v5401/Health-Monitoring.html

Regards,

Aastha Bhardwaj

Rate if that helps!!!

[Mady]

Hi Aastha,

Thank you very much for you response. I am just new on Cisco Firepower. I just want to check the over all health status of the IPS. The link you have provided is very helpful. :) 

Regards,

Mady

[Mady]

Hi Aastha,

I have few questions. Our Sourcefire IPS is currently using the default health policy. Is it possible to create new policy so I can activate all the health modules?Then use it, after an hour, once I got the results that I need to see, I will return its policy to the Cisco default health policy? Will this action affect the performance of the IPS?

Thank you for your help!:)

Regards,

Mady

[Aastha Bhardwaj]

Hi,

That should not cause any impact on network because health policy is only to check the status of the device.

Refer :

http://www.cisco.com/c/en/us/support/docs/security/firesight-management-center/118595-configure-firesight-00.html#anc6

Regards,

Aastha Bhardwaj

Rate if that helps!!!

[Mady]

Hi Aastha,

What will happen if I manually run all module test just to collect up-to-date information?Will the default health policy return after some time?

Thank you very much.

Regards,

Madel

[Aastha Bhardwaj]

Hi,

On Health alerts you can run all modules , that will just check the health of all the processes again and will return you the result.

Regards,

Aastha Bhardwaj