SNMP-fingerprinting-for-Cisco-FTD (#634)

* SNMP-fingerprinting-for-Cisco-FTD * Revert "Fixing pipeline." This reverts commit b012240. * Revert "Revert "Fixing pipeline."" This reverts commit 50eb30c. * Update snmp_sysdescr.xml changed certainty to 0.85
rapid7 · Jan 29, 2025 · 5905565 · 5905565
1 parent e158f4a
commit 5905565
Show file tree

Hide file tree

Showing 3 changed files with 14 additions and 2 deletions.
diff --git a/identifiers/os_family.txt b/identifiers/os_family.txt
@@ -171,6 +171,7 @@ SVR4
 SageNET
 Scalance
 ScreenOS
+Secure Firewall
 Secure Network Access Switch
 Secure Router
 Sharp AR Series

diff --git a/identifiers/os_product.txt b/identifiers/os_product.txt
@@ -92,6 +92,7 @@ Fedora Core
 Fermentrack
 Fiery Print Server
 Firepower
+Firepower Threat Defense
 Firewall-1
 Fireware
 FortiOS

diff --git a/xml/snmp_sysdescr.xml b/xml/snmp_sysdescr.xml
@@ -1672,8 +1672,6 @@ S/N: FOC2236NA6V</example>
     <param pos="1" name="hw.product"/>
   </fingerprint>
 
-
-
   <fingerprint pattern="^Cisco Adaptive Security Appliance Version (\d+\.\d+\(\d+\)\d*)">
     <description>Cisco Adaptive Security Appliance</description>
     <example os.version="8.0(2)">Cisco Adaptive Security Appliance Version 8.0(2)</example>
@@ -1959,6 +1957,18 @@ Copyright (c) 1995-2005 by Cisco Systems
     <param pos="1" name="hw.model"/>
   </fingerprint>
 
+  <fingerprint pattern="^Cisco Firepower Threat Defense, Version ((?:\d*\.){1,5}\d{1,})">
+    <description>Cisco Firepower Threat Defense</description>
+    <example os.version="10.2.3.1">Cisco Firepower Threat Defense, Version 10.2.3.1 (Build 43), ASA Version 9.9(2)4</example>
+    <example os.version="7.0.0">Cisco Firepower Threat Defense, Version 7.0.0 (Build 3), ASA Version 9.16(0)3</example>
+    <param pos="0" name="os.certainty" value="0.85"/>
+    <param pos="0" name="os.vendor" value="Cisco"/>
+    <param pos="0" name="os.product" value="Firepower Threat Defense"/>
+    <param pos="0" name="os.family" value="Secure Firewall"/>
+    <param pos="0" name="os.device" value="Firewall"/>
+    <param pos="1" name="os.version"/>
+  </fingerprint>
+
   <!--======================================================================
                              Crestron
    =======================================================================-->