IPS For Credit Card Transactions (PAN REGEX) - FTD2100

[Fantas]

Hi,

I am applying solution to protect credit card transaction so that any credit related traffic should not leave company environment.

I think this is possible with IPS for  sensitive Data detection.

I have default policy Balance Security and connectivity

Questions:

- Is there any step by step procedure to apply sensitive data detection through IPS (PAN REGEX)

- Is this possible with default IPS policy Balance Security and Connectivity or required new customize IPS policy

- Can we see credit card transaction in Intrusion Logs and email immediately if such transaction detected.

[Abheesh Kumar]

Hi,

You can able to do this by enabling Preprocessors. But detecting sensitive data can have a high impact on the performance of your Firepower System. Below guide will help you to configure detection of sensitive data.

https://www.cisco.com/c/en/us/td/docs/security/firepower/60/configuration/guide/fpmc-config-guide-v60/Sensitive_Data_Detection.pdf

HTH

Abheesh

[Fantas]

Thanks,

I will go through and start implementing,

Will ask if any questions in between