Event Analysis

	Replies	Helpful Votes	Views
FirePower 6.0, Initiator User showing u... by karl_flynn on ‎01-07-2016 03:38 AM Latest post on ‎09-08-2017 11:15 AM by bkastor 21 Replies 1276 Views	21 Replies	20 Helpful Votes	1276 Views
SourceFire AMP by pauls7490 on ‎03-29-2016 09:09 AM Latest post on ‎09-05-2017 10:00 AM by michaeldavis4 7 Replies 92 Views	7 Replies	5 Helpful Votes	92 Views
source fire by rockey on ‎08-21-2017 09:03 PM 0 Replies 39 Views	0 Replies	0 Helpful Votes	39 Views
Anyone have a play book on investigatio... by babiojd01 on ‎08-21-2017 08:53 PM 0 Replies 36 Views	0 Replies	0 Helpful Votes	36 Views
Change in applications after SourceFIRE... by Brandon Koehler on ‎08-15-2017 08:33 AM 0 Replies 16 Views	0 Replies	0 Helpful Votes	16 Views
Disk Usage Error by bhamel on ‎01-11-2017 09:58 AM Latest post on ‎08-07-2017 02:02 AM by Jetsy Mathew 6 Replies 193 Views	6 Replies	5 Helpful Votes	193 Views
FirePower- Event Backlog by tsiemers1 on ‎12-12-2016 07:28 AM Latest post on ‎07-07-2017 01:52 PM by mng-zahid 2 Replies 83 Views	2 Replies	0 Helpful Votes	83 Views
Cisco FirePOWER Security Intelligence by dosadaubija on ‎01-05-2017 08:11 AM Latest post on ‎07-07-2017 04:03 AM by Kristian Mattocks 1 Reply 42 Views	1 Reply	0 Helpful Votes	42 Views
BLACKLIST DNS request for known malware... by ramachandran.gunasekaran on ‎06-18-2017 01:56 PM Latest post on ‎06-27-2017 05:19 PM by ramachandran.gunasekaran 6 Replies 127 Views	6 Replies	5 Helpful Votes	127 Views
Cisco firesight management center by Nkechi Latunji on ‎06-12-2017 04:57 PM Latest post on ‎06-16-2017 12:12 AM by Marvin Rhoads 1 Reply 15 Views	1 Reply	0 Helpful Votes	15 Views
Firepower Blocking Mozilla firefox by emmanuel.mbanda on ‎06-13-2017 03:56 AM Latest post on ‎06-13-2017 02:55 PM by Anonymous 1 Reply 25 Views	1 Reply	0 Helpful Votes	25 Views
whitelist violation change from priorit... by evan.chadwick1 on ‎05-31-2017 05:01 PM Latest post on ‎06-01-2017 06:52 PM by atatistc 3 Replies 22 Views	3 Replies	0 Helpful Votes	22 Views
MALWARE-BACKDOOR wow 23 runtime detecti... by ramachandran.gunasekaran on ‎05-29-2017 07:49 AM Latest post on ‎05-31-2017 08:02 PM by atatistc 1 Reply 21 Views	1 Reply	0 Helpful Votes	21 Views
(1:1000122) Local - BAD-TRAFFIC SSH bru... by ramachandran.gunasekaran on ‎05-24-2017 06:28 AM Latest post on ‎05-31-2017 07:28 PM by atatistc 4 Replies 19 Views	4 Replies	4 Helpful Votes	19 Views
Cisco Sourcefire Intrusion and File eve... by Vishnu Ravindranath on ‎02-12-2017 02:51 PM Latest post on ‎05-27-2017 03:20 PM by Vishnu Ravindranath 2 Replies 67 Views	2 Replies	0 Helpful Votes	67 Views
FireSight - Custom Dashboard by avan on ‎02-09-2017 12:30 PM Latest post on ‎05-22-2017 11:07 AM by Veronika Klauzova 1 Reply 21 Views	1 Reply	0 Helpful Votes	21 Views
Firepower Threat Defense on ASA - Can't... by Jonathan Bayless on ‎04-21-2017 11:14 AM Latest post on ‎05-22-2017 09:19 AM by Veronika Klauzova 4 Replies 71 Views	4 Replies	0 Helpful Votes	71 Views
Firepower blocking CnC by Lars Brachlow on ‎04-19-2017 07:07 AM Latest post on ‎04-24-2017 05:27 PM by Marvin Rhoads 4 Replies 74 Views	4 Replies	0 Helpful Votes	74 Views
FirePower Syslog messages ID's by tsiemers1 on ‎07-28-2016 09:48 AM Latest post on ‎03-24-2017 12:23 PM by tsiemers1 3 Replies 198 Views	3 Replies	0 Helpful Votes	198 Views
How to change 90 days in alert for clas... by kiki.marconio on ‎02-02-2017 01:00 AM Latest post on ‎03-23-2017 03:30 AM by Marvin Rhoads 1 Reply 24 Views	1 Reply	0 Helpful Votes	24 Views
119:15 HI_CLIENT_OVERSIZE_DIR, and all ... by bhaskarayani on ‎11-04-2015 01:51 PM Latest post on ‎02-24-2017 08:15 AM by mcvosi 4 Replies 2401 Views	4 Replies	5 Helpful Votes	2401 Views
How to customize SourceFire Alerts by akash malhotra on ‎02-21-2017 06:57 AM 0 Replies 28 Views	0 Replies	0 Helpful Votes	28 Views
Cisco ASA 5516 with firepower services by amalmichaelvj on ‎01-20-2017 10:39 PM Latest post on ‎02-01-2017 08:26 AM by Barrett Cowan 1 Reply 27 Views	1 Reply	0 Helpful Votes	27 Views
Cisco ASA FireSight Management Center L... by amalmichaelvj on ‎01-15-2017 09:38 PM Latest post on ‎01-17-2017 02:21 PM by nspasov 1 Reply 43 Views	1 Reply	0 Helpful Votes	43 Views
Firepower Management Center 6.1 viewing... by Lee Dress on ‎12-20-2016 08:18 AM Latest post on ‎01-11-2017 08:35 AM by Lee Dress 3 Replies 47 Views	3 Replies	0 Helpful Votes	47 Views
ASA Firepower with Automatic Applicatio... by u.drechsel on ‎12-06-2016 06:53 AM Latest post on ‎01-09-2017 02:17 AM by Claudiu Cismaru 1 Reply 95 Views	1 Reply	0 Helpful Votes	95 Views
Trying to understand intrusion event re... by roy.phillips1 on ‎12-02-2016 03:22 AM Latest post on ‎12-22-2016 12:31 PM by nspasov 1 Reply 22 Views	1 Reply	0 Helpful Votes	22 Views
Defense Center 750 \| Version 5.4.1.7 by bdeclaro181 on ‎12-02-2016 12:39 AM Latest post on ‎12-22-2016 12:23 PM by nspasov 1 Reply 23 Views	1 Reply	0 Helpful Votes	23 Views
sourcefire action is block but sometime... by engahmedsaied on ‎11-19-2016 04:16 AM Latest post on ‎12-01-2016 09:40 PM by engahmedsaied 2 Replies 36 Views	2 Replies	0 Helpful Votes	36 Views
GeoDB - Accuracy and expectations by Ella Licari on ‎11-15-2016 05:10 PM Latest post on ‎11-26-2016 02:18 AM by kaisero 1 Reply 17 Views	1 Reply	0 Helpful Votes	17 Views

Popular Documents

FireSIGHT, Firepower (Sourcefire) License Matrix

Created by Nazmul Rajib on 03-18-2015 07:25 AM

The attached document provides a quick overview of the FireSIGHT and Firepower (Sourcefire) licenses on various deployment and purchase scenarios.

Re-generate Licenses for crashed/re-image FireSIGHT Management Center Virtual Appliance

Created by Sunil Kumar on 01-01-2016 10:11 PM

This article describes how to re-generate the licenses for crashed/re-image FireSIGHT Management Center Virtual Appliance. If Virtual FireSIGHT manager crashed and which has to be re-deploy using Vmware OVF file. At this situation, license key will be cha... view more

Best Practices for Configuring an RNA Policy on a Sourcefire 3D System

Created by Nazmul Rajib on 07-22-2014 12:02 PM

This article describes the basic steps and best practices for creating and configuring an RNA policy in 4.10. Before you can begin to generate RNA events, or gather RNA data, you need to make sure you have done the following: 1) The sensor must be managed... view more

New solutions

Subject	Author
whitelist violation change from priorit... Event Analysis	evan.chadwick1
Cisco Sourcefire Intrusion and File eve... Event Analysis	Vishnu Ravindranath
Firepower Threat Defense on ASA - Can't... Event Analysis	Jonathan Bayless
Firepower blocking CnC Event Analysis	Lars Brachlow
FMC Connection History - how far back i... Event Analysis	evan.chadwick1
FireSight Defence Center Daylight savin... Event Analysis	Maher Shaban
Export logs/events to other host Event Analysis	Jacob Jacobson
Reporting a false positive. Event Analysis	Brian Korfitz Miehs
FirePower doesn't work when use Active ... Event Analysis	suradech.por
FirePower Management Center 6.0 - Not s... Event Analysis	Martin Houde

Unanswered Topics

Subject	Author	Posted
source fire	rockey	‎08-21-2017 09:03 PM
Anyone have a play book on investigatio...	babiojd01	‎08-21-2017 08:53 PM
Change in applications after SourceFIRE...	Brandon Koehler	‎08-15-2017 08:33 AM
How to customize SourceFire Alerts	akash malhotra	‎02-21-2017 06:57 AM
Firesight fail to track username after ...	engahmedsaied	‎11-19-2016 04:06 AM

Community News

See all Community News

Known issues post-launch

There are some known issues that are ongoing post-launch. We'll keep you updated on their status in this post. Please subscribe if you'd...

The new Cisco Support Community: What to expect, part III

For part I in this series, click here.For part II in this series, click here. As we finalize the new Cisco Support Community site, we wa...

The new Cisco Support Community: What to expect, part II

For part I in this series, click here.For part III in this series, click here. As we finalize the new Cisco Support Community site, we w...