Техническая Инструкция для Cisco Cisco ASA 5506H-X with FirePOWER Services

Contents

Introduction

Prerequisites

Requirements

Components Used

Background Information

Overview of Security Intelligence feed

Manually add IP addresses to Global-Blacklist and Global-Whitelist

Create the Custom list of blacklist IP Address

Configure the Security Intelligence

Deploy Access Control Policy

Security Intelligence’s events Monitoring

Verify

Troubleshoot

Related Information

Introduction

This document describes Cisco Security Intelligence/IP address reputation and configuration of IP
blacklisting (Blocking) while using custom/auto feed of low repute IP address.

Prerequisites

Requirements

Cisco recommends that you have knowledge of these topics:

Knowledge of ASA (Adaptive Security Appliance) firewall, ASDM (Adaptive Security Device
Manager)

●

FirePOWER appliance knowledge

●

Note: Security Intelligence filtering requires a Protection license.

Components Used

The information in this document is based on these software and hardware versions:

ASA FirePOWER modules (ASA 5506X/5506H-X/5506W-X, ASA 5508-X, ASA 5516-X )
running software version 5.4.1 and above

●

ASA FirePOWER module (ASA 5515-X, ASA 5525-X, ASA 5545-X, ASA 5555-X) running
software version 6.0.0 and above

●

The information in this document was created from the devices in a specific lab environment. All of