Cisco Support Community
Showing results for 
Search instead for 
Did you mean: 

F5 Remediation Module and Documentation

Allows Sourcefire to pass event details to F5's BigIP.  Big IP can insert an iRule to block or quarantine a device.

Version history
Revision #:
1 of 1
Last update:
‎07-21-2014 12:17 PM
Updated by:
Labels (1)
Cisco Employee

This looks really cool, do you have any info on how to configure the remediation on the Firepower Management Center side of this?



Cisco Employee

OK, so I think that you have to create a file with the pl script and the template like so:

tar cvzf f5.tar.gz module.template
Here are the guidelines for importing a remediation module:
Thanks Ben and Doug