What is the feed mechanism and format to put into the cisco asa firewall

[Naina Emmanuel]

May I know that if I want to input feeds (some logs) to Cisco ASA firewall then what would be the mechanism for that? And in which format these feeds can be given like stix, text, CSV or some other format. 

Thanks

[Marvin Rhoads · Accepted solution]

An ASA firewall running ASA image cannot ingest threat feeds or syslogs.

If it's running a Firepower Service module or the FTD image, the managing Firepower Management Center (6.2 or above) can ingest STIX/Taxi feeds in addition to the Cisco Security Intelligence and send those down to the module for use in policies.

[Naina Emmanuel]

Thanking!
Do we have any tutorial or mechanism guide to ingest feeds in Firepower Service module or FTD images?
Would be very helpful.

[Marvin Rhoads · Accepted solution]

You're welcome.

The feeds are ingested by FMC. The configuration guide covers the steps for setting this up:

https://www.cisco.com/c/en/us/td/docs/security/firepower/623/configuration/guide/fpmc-config-guide-v623/cisco_threat_intelligence_director__tid_.html