Ask Cisco Security Experts Questions Now!

[hcaldwel]

The Security Beyond Traditional Defenses webcast is on NOW!  Ask Cisco Security experts questions now!

[madaes]

Hi there!

How the FirePower integrates with Cisco Email and Web Security Gateways? (former IronPort)?

[dastuart]

All intelligence and Advanced Malware Protection (available for Cisco ESA and WSA) telemetry informs our Collective Security Intelligence cloud, which in turns provides file disposition for all Cisco security products including the new Cisco ASA with FirePOWER Services appliances.

[SAM WILSON]

Sounds like FirePower doesn't work on the Cat6500/7600 ASASM.  Can you confirm?

[stekane]

Correct, it does not.

[SAM WILSON]

Thanks (sort of ).

[kmikol]

How does the appliance inspect SSL traffic in terms on file type detection, application detection etc?

[Shao-Yu Chen]

Can this replace Ironport? I ask this because I can see some troubleshooting difficulties when I need to block or unblock some traffics. I will have to look both devices ASA FirePower and Ironport.

[dastuart]

Cisco provides a robust portfolio of security solutions to address varied customer requirements.  Cisco ASA with FirePOWER Services provides AVC and URL Filtering abilities.   The Cisco ESA / WSA products provide many additional capabilities (such as gateway/proxying) that extend protections.  

[astrangar]

Hi,

is firepower separate service purchased for asa fw or it is integrated to new asa?

[astrangar]

How new asa compares to Palo Alto? It looks very similar in a process of inspection and detection.

[dastuart]

Cisco ASA with FirePOWER Services provides superior threat detection / protection with greater visibility than traditional NGFW's.  By tightly integrating functions and sharing intelligence we enable dynamic controls, that adjust in real time to changing IT environments and the threat landscape, and provide superior ability to detect and remediate advanced threats that other solutions miss.

[samrasto]

Yes, correct. Cisco ASA with FirePOWER Services is an integrated solution. You can also add FirePOWER Services to existing ASA 5500-X and ASA 5585-X firewalls.

[choctawkaul]

Given that there is Geolocation Information, can I block all traffic from a specific geolocation?

[stekane]

You can block traffic from specific geos, yes.