Endpoint Security

Hi Can Firepower (ASA with firepower module/FTD) can block files depending on size? Example: Blocking rar files with size greater than 300 MB? Regards, Walied Farghaly

I understand that cisco Firepower decrypts SSL. But it does not have a seperate option for SSH decryption ( like PaloAlto). My question is.. does it decrypt it by in the same policy ( SSL decryption policy that is) or it does not ? 

What are the possible reasons why AMP agent mark a malicious file as quarantine failed? We have instance that the agent pop-up and showed threat detected but based on the description it was quarantined failed. Thanks!

Hi bro, I have a problem with ASA5516-X with firepower. When I sent a email, which is attached a file 20 MB, it is faild. After that, I have tested again, I find out that if a file which have smaller size 10MB, it work ok. Can you give me advise? T...

Hi,I installed AMP Private Cloud virtual appliance version 2.3.5 in Air-Gap mode.I downloaded the protected DB ISO file using the amp-sync tool.When I am trying to update the protected DB from the Administration portal I am getting the following erro...

Why is that so ?I plan to implement AMP for networks and now looking into AMP for endpoints. But my endpoint is small for initial phase. Looking into manageability in FMC.

I believe I am getting a false positive for ChromeSetup.exe. I downloaded the Chrome beta installer direct from Google. SHA-256 a1fa0737b15a05ac5073985839af253f3470c162730f89f604eb3dc008066c05 Virus Total analysis https://www.virustotal.com/en/file...

Hello, We use AMP integrated with Firepower and send events to our SIEM via eStreamer.  We have been seeing events with a "file_action" of 0.  Our documentation does not identify what this type of event might be.   The most current documentation I c...

We are trying to understand why it took around four (4) days for the file analysis to determine the disposition of the unknown file with network trajectory below (screenshot).  Please have someone take a closer look on our IPS and provide comprehensi...

Hello, I am getting 'MALWARE-CNC Win.Trojan.Glupteba C&C server READY command to client" alerts from Source port 10003 to high numbered destination ports in my network. Most of the source IP belongs a Linux server in my network. Where can I find th...