I am trying to implement a solution to block all traffic through an ASA device in case of an intrusion, and the block would be lifted manually later. Any idea how this can be achieved?
Hi @mikael.lahtela
I'm not using ISE, just an ASA 5508-X with Firepower. The problem I have with the IOS Null route remediation is that it uses telnet.
I have looked at the remediation subsystem, and one of the methods I thought of is creating an a...
Did you have any luck with this? I am looking to implement an automated network disconnect action on an ASA device with a firepower module, and tried using the Firepower Management Center REST API and an access control policy to achieve that but the ...