Cisco Firepower Compliance File Reference

The Cisco Firepower plugin scans Cisco Firepower virtual and physical devices for Firepower Threat Defense applications and audits the application configuration.

The plugin supports the following connections:

• Connecting to the Firepower chassis enumerates modules of the target.
• Connecting directly to the module boot CLI connects to the Firepower Threat Defense application.
• Connecting directly to the application pulls the full running configuration.

Note: Support for more than one Threat Defense module is enabled when the dependent plugin, Cisco Firepower Enumeration (128052), is run to enumerate the available modules.

This section includes the following information:

• Cisco Firepower Scan Requirements
• CONFIG_CHECK and CONFIG_CHECK_NOT Checks
• CMD_EXEC Check
• KB_VALUE Check