SNMP-fingerprinting-for-Cisco-FTD

rapid7 · Jan 15, 2025 · 701f823 · 701f823
1 parent 0ffcd3e
commit 701f823
Show file tree

Hide file tree

Showing 2 changed files with 12 additions and 2 deletions.
diff --git a/identifiers/os_family.txt b/identifiers/os_family.txt
@@ -63,6 +63,7 @@ FRITZ!Fon
 FS
 FX Series
 Fiery
+Firepower Threat Defense
 Firewall-1
 Forms Printer
 FortiOS

diff --git a/xml/snmp_sysdescr.xml b/xml/snmp_sysdescr.xml
@@ -1639,8 +1639,6 @@ S/N: FOC2236NA6V</example>
     <param pos="1" name="hw.product"/>
   </fingerprint>
 
-
-
   <fingerprint pattern="^Cisco Adaptive Security Appliance Version (\d+\.\d+\(\d+\)\d*)">
     <description>Cisco Adaptive Security Appliance</description>
     <example os.version="8.0(2)">Cisco Adaptive Security Appliance Version 8.0(2)</example>
@@ -1926,6 +1924,17 @@ Copyright (c) 1995-2005 by Cisco Systems
     <param pos="1" name="hw.model"/>
   </fingerprint>
 
+  <fingerprint pattern="^Cisco Firepower Threat Defense, Version ((?:\d*\.){1,5}\d{1,})">
+    <description>Cisco Firepower Threat Defense</description>
+    <example os.version="10.2.3.1">Cisco Firepower Threat Defense, Version 10.2.3.1 (Build 43), ASA Version 9.9(2)4</example>
+    <example os.version="7.0.0">Cisco Firepower Threat Defense, Version 7.0.0 (Build 3), ASA Version 9.16(0)3</example>
+    <param pos="0" name="os.certainty" value="0.7"/>
+    <param pos="0" name="os.vendor" value="Cisco"/>
+    <param pos="0" name="os.family" value="Firepower Threat Defense"/>
+    <param pos="0" name="os.device" value="Firewall"/>
+    <param pos="1" name="os.version"/>
+  </fingerprint>
+
   <!--======================================================================
                              Crestron
    =======================================================================-->