FMC and AMP Cloud integration for Custom signature (MD5-SHA1) lookup need

[murat001]

Hi All 

I want to ask a thing related this ?

we have FTD/FMC and along with treat/malware license and we want to block files according to SHA-256 , SHA1 and MD5  signatures. There is no problem with SHA-256 because we can add custom file list as SHA-256 on FMC object >  file list . But we couldnt add other signiture. I guess Firepower not supported MD5 and SHA-1 hashes. 

My question is, if AMP Cloud support this hashes (SHA-1 and MD5) , can we use AMP for Network along with FMC. FMC malware cloud lookup can ask to AMP Cloud for these hash ? if we have Firepower Malware License can we use the AMP cloud for our custom cloud lookup need .

Thanks 

Regards 

[Marvin Rhoads]

Only SHA-256 hash types are supported by AMP.

https://community.cisco.com/t5/network-security/blocking-hash-on-cisco-fmc/td-p/3705305