SNMP-fingerprinting-for-Cisco-FTD

rapid7 · Jan 15, 2025 · 48ac5c3 · 48ac5c3
1 parent 0ffcd3e
commit 48ac5c3
Show file tree

Hide file tree

Showing 3 changed files with 14 additions and 2 deletions.
diff --git a/identifiers/os_family.txt b/identifiers/os_family.txt
@@ -170,6 +170,7 @@ SVR4
 SageNET
 Scalance
 ScreenOS
+Secure Firewall
 Secure Network Access Switch
 Secure Router
 Sharp AR Series

diff --git a/identifiers/os_product.txt b/identifiers/os_product.txt
@@ -89,6 +89,7 @@ Fedora Core
 Fermentrack
 Fiery Print Server
 Firepower
+Firepower Threat Defense
 Firewall-1
 Fireware
 FortiOS

diff --git a/xml/snmp_sysdescr.xml b/xml/snmp_sysdescr.xml
@@ -1639,8 +1639,6 @@ S/N: FOC2236NA6V</example>
     <param pos="1" name="hw.product"/>
   </fingerprint>
 
-
-
   <fingerprint pattern="^Cisco Adaptive Security Appliance Version (\d+\.\d+\(\d+\)\d*)">
     <description>Cisco Adaptive Security Appliance</description>
     <example os.version="8.0(2)">Cisco Adaptive Security Appliance Version 8.0(2)</example>
@@ -1926,6 +1924,18 @@ Copyright (c) 1995-2005 by Cisco Systems
     <param pos="1" name="hw.model"/>
   </fingerprint>
 
+  <fingerprint pattern="^Cisco Firepower Threat Defense, Version ((?:\d*\.){1,5}\d{1,})">
+    <description>Cisco Firepower Threat Defense</description>
+    <example os.version="10.2.3.1">Cisco Firepower Threat Defense, Version 10.2.3.1 (Build 43), ASA Version 9.9(2)4</example>
+    <example os.version="7.0.0">Cisco Firepower Threat Defense, Version 7.0.0 (Build 3), ASA Version 9.16(0)3</example>
+    <param pos="0" name="os.certainty" value="0.7"/>
+    <param pos="0" name="os.vendor" value="Cisco"/>
+    <param pos="0" name="os.product" value="Firepower Threat Defense"/>
+    <param pos="0" name="os.family" value="Secure Firewall"/>
+    <param pos="0" name="os.device" value="Firewall"/>
+    <param pos="1" name="os.version"/>
+  </fingerprint>
+
   <!--======================================================================
                              Crestron
    =======================================================================-->