FTD vulnerability scanning?

[Knassi]

Do Cisco FTDs do vulnerability scan on the the devices on the  network?

[MHM Cisco World]

check NMAP are it what you looking for ?

[Marvin Rhoads · Accepted solution]

Not a true vulnerability scan, but you can use the built-in nmap to do more thorough network/host discovery which informs the IPS (Snort) rules for greater efficacy.

Details here: https://www.cisco.com/c/en/us/td/docs/security/firepower/70/configuration/guide/fpmc-config-guide-v70/host_identity_sources.html#ID-2219-00000532

FMC does work with third party vulnerability scanners via the host input API and can be configured using correlation rules to take action on a host identified to have vulnerabilities.

[Knassi]

Thank you so much Marvin