Event Analysis

	Replies	Helpful Votes	Views
FMC shut properly by Ibrahim Jamil on ‎09-22-2017 07:21 AM Latest post on ‎09-24-2017 02:01 AM by Marvin Rhoads 1 Reply 34 Views	1 Reply	0 Helpful Votes	34 Views
FirePower 6.0, Initiator User showing u... by karl_flynn on ‎01-07-2016 03:38 AM Latest post on ‎09-08-2017 11:15 AM by bkastor 21 Replies 1341 Views	21 Replies	20 Helpful Votes	1341 Views
SourceFire AMP by pauls7490 on ‎03-29-2016 09:09 AM Latest post on ‎09-05-2017 10:00 AM by michaeldavis4 7 Replies 99 Views	7 Replies	5 Helpful Votes	99 Views
source fire by rockey on ‎08-21-2017 09:03 PM 0 Replies 44 Views	0 Replies	0 Helpful Votes	44 Views
Anyone have a play book on investigatio... by babiojd01 on ‎08-21-2017 08:53 PM 0 Replies 43 Views	0 Replies	0 Helpful Votes	43 Views
Change in applications after SourceFIRE... by Brandon Koehler on ‎08-15-2017 08:33 AM 0 Replies 22 Views	0 Replies	0 Helpful Votes	22 Views
Disk Usage Error by bhamel on ‎01-11-2017 09:58 AM Latest post on ‎08-07-2017 02:02 AM by Jetsy Mathew 6 Replies 202 Views	6 Replies	5 Helpful Votes	202 Views
FirePower- Event Backlog by tsiemers1 on ‎12-12-2016 07:28 AM Latest post on ‎07-07-2017 01:52 PM by mng-zahid 2 Replies 91 Views	2 Replies	0 Helpful Votes	91 Views
Cisco FirePOWER Security Intelligence by dosadaubija on ‎01-05-2017 08:11 AM Latest post on ‎07-07-2017 04:03 AM by Kristian Mattocks 1 Reply 44 Views	1 Reply	0 Helpful Votes	44 Views
BLACKLIST DNS request for known malware... by ramachandran.gunasekaran on ‎06-18-2017 01:56 PM Latest post on ‎06-27-2017 05:19 PM by ramachandran.gunasekaran 6 Replies 150 Views	6 Replies	5 Helpful Votes	150 Views
Cisco firesight management center by Nkechi Latunji on ‎06-12-2017 04:57 PM Latest post on ‎06-16-2017 12:12 AM by Marvin Rhoads 1 Reply 17 Views	1 Reply	0 Helpful Votes	17 Views
Firepower Blocking Mozilla firefox by emmanuel.mbanda on ‎06-13-2017 03:56 AM Latest post on ‎06-13-2017 02:55 PM by Anonymous 1 Reply 28 Views	1 Reply	0 Helpful Votes	28 Views
whitelist violation change from priorit... by evan.chadwick1 on ‎05-31-2017 05:01 PM Latest post on ‎06-01-2017 06:52 PM by atatistc 3 Replies 28 Views	3 Replies	0 Helpful Votes	28 Views
MALWARE-BACKDOOR wow 23 runtime detecti... by ramachandran.gunasekaran on ‎05-29-2017 07:49 AM Latest post on ‎05-31-2017 08:02 PM by atatistc 1 Reply 24 Views	1 Reply	0 Helpful Votes	24 Views
(1:1000122) Local - BAD-TRAFFIC SSH bru... by ramachandran.gunasekaran on ‎05-24-2017 06:28 AM Latest post on ‎05-31-2017 07:28 PM by atatistc 4 Replies 22 Views	4 Replies	4 Helpful Votes	22 Views
Cisco Sourcefire Intrusion and File eve... by Vishnu Ravindranath on ‎02-12-2017 02:51 PM Latest post on ‎05-27-2017 03:20 PM by Vishnu Ravindranath 2 Replies 76 Views	2 Replies	0 Helpful Votes	76 Views
FireSight - Custom Dashboard by avan on ‎02-09-2017 12:30 PM Latest post on ‎05-22-2017 11:07 AM by Veronika Klauzova 1 Reply 24 Views	1 Reply	0 Helpful Votes	24 Views
Firepower Threat Defense on ASA - Can't... by Jonathan Bayless on ‎04-21-2017 11:14 AM Latest post on ‎05-22-2017 09:19 AM by Veronika Klauzova 4 Replies 80 Views	4 Replies	0 Helpful Votes	80 Views
Firepower blocking CnC by Lars Brachlow on ‎04-19-2017 07:07 AM Latest post on ‎04-24-2017 05:27 PM by Marvin Rhoads 4 Replies 85 Views	4 Replies	0 Helpful Votes	85 Views
FirePower Syslog messages ID's by tsiemers1 on ‎07-28-2016 09:48 AM Latest post on ‎03-24-2017 12:23 PM by tsiemers1 3 Replies 210 Views	3 Replies	0 Helpful Votes	210 Views
How to change 90 days in alert for clas... by kiki.marconio on ‎02-02-2017 01:00 AM Latest post on ‎03-23-2017 03:30 AM by Marvin Rhoads 1 Reply 26 Views	1 Reply	0 Helpful Votes	26 Views
119:15 HI_CLIENT_OVERSIZE_DIR, and all ... by bhaskarayani on ‎11-04-2015 01:51 PM Latest post on ‎02-24-2017 08:15 AM by mcvosi 4 Replies 2451 Views	4 Replies	5 Helpful Votes	2451 Views
How to customize SourceFire Alerts by akash malhotra on ‎02-21-2017 06:57 AM 0 Replies 32 Views	0 Replies	0 Helpful Votes	32 Views
Cisco ASA 5516 with firepower services by amalmichaelvj on ‎01-20-2017 10:39 PM Latest post on ‎02-01-2017 08:26 AM by Barrett Cowan 1 Reply 29 Views	1 Reply	0 Helpful Votes	29 Views
Cisco ASA FireSight Management Center L... by amalmichaelvj on ‎01-15-2017 09:38 PM Latest post on ‎01-17-2017 02:21 PM by nspasov 1 Reply 46 Views	1 Reply	0 Helpful Votes	46 Views
Firepower Management Center 6.1 viewing... by Lee Dress on ‎12-20-2016 08:18 AM Latest post on ‎01-11-2017 08:35 AM by Lee Dress 3 Replies 51 Views	3 Replies	0 Helpful Votes	51 Views
ASA Firepower with Automatic Applicatio... by u.drechsel on ‎12-06-2016 06:53 AM Latest post on ‎01-09-2017 02:17 AM by Claudiu Cismaru 1 Reply 103 Views	1 Reply	0 Helpful Votes	103 Views
Trying to understand intrusion event re... by roy.phillips1 on ‎12-02-2016 03:22 AM Latest post on ‎12-22-2016 12:31 PM by nspasov 1 Reply 26 Views	1 Reply	0 Helpful Votes	26 Views
Defense Center 750 \| Version 5.4.1.7 by bdeclaro181 on ‎12-02-2016 12:39 AM Latest post on ‎12-22-2016 12:23 PM by nspasov 1 Reply 25 Views	1 Reply	0 Helpful Votes	25 Views
sourcefire action is block but sometime... by engahmedsaied on ‎11-19-2016 04:16 AM Latest post on ‎12-01-2016 09:40 PM by engahmedsaied 2 Replies 39 Views	2 Replies	0 Helpful Votes	39 Views

Popular Documents

FireSIGHT, Firepower (Sourcefire) License Matrix

Created by Nazmul Rajib on 03-18-2015 07:25 AM

The attached document provides a quick overview of the FireSIGHT and Firepower (Sourcefire) licenses on various deployment and purchase scenarios.

Best Practices for Configuring an RNA Policy on a Sourcefire 3D System

Created by Nazmul Rajib on 07-22-2014 12:02 PM

This article describes the basic steps and best practices for creating and configuring an RNA policy in 4.10. Before you can begin to generate RNA events, or gather RNA data, you need to make sure you have done the following: 1) The sensor must be managed... view more

Re-generate Licenses for crashed/re-image FireSIGHT Management Center Virtual Appliance

Created by Sunil Kumar on 01-01-2016 10:11 PM

This article describes how to re-generate the licenses for crashed/re-image FireSIGHT Management Center Virtual Appliance. If Virtual FireSIGHT manager crashed and which has to be re-deploy using Vmware OVF file. At this situation, license key will be cha... view more

New solutions

Subject	Author
whitelist violation change from priorit... Event Analysis	evan.chadwick1
Cisco Sourcefire Intrusion and File eve... Event Analysis	Vishnu Ravindranath
Firepower Threat Defense on ASA - Can't... Event Analysis	Jonathan Bayless
Firepower blocking CnC Event Analysis	Lars Brachlow
FMC Connection History - how far back i... Event Analysis	evan.chadwick1
FireSight Defence Center Daylight savin... Event Analysis	Maher Shaban
Export logs/events to other host Event Analysis	Jacob Jacobson
Reporting a false positive. Event Analysis	Brian Korfitz Miehs
FirePower doesn't work when use Active ... Event Analysis	suradech.por
FirePower Management Center 6.0 - Not s... Event Analysis	Martin Houde

Unanswered Topics

Subject	Author	Posted
source fire	rockey	‎08-21-2017 09:03 PM
Anyone have a play book on investigatio...	babiojd01	‎08-21-2017 08:53 PM
Change in applications after SourceFIRE...	Brandon Koehler	‎08-15-2017 08:33 AM
How to customize SourceFire Alerts	akash malhotra	‎02-21-2017 06:57 AM
Firesight fail to track username after ...	engahmedsaied	‎11-19-2016 04:06 AM

Community News

See all Community News

Known issues post-launch

There are some known issues that are ongoing post-launch. We'll keep you updated on their status in this post. Please subscribe if you'd...

The new Cisco Support Community: What to expect, part III

For part I in this series, click here.For part II in this series, click here. As we finalize the new Cisco Support Community site, we wa...

The new Cisco Support Community: What to expect, part II

For part I in this series, click here.For part III in this series, click here. As we finalize the new Cisco Support Community site, we w...