Cisco Firepower Notes

Base policy IPS policies lets you avoid tuning IPS
Security over connectivity

Before = Access policies
During = IPS inspection
After = IOC/correlation

Create Banned applications rule

Allow file sharing
Inspection tap
Sec over connectivity
Malware policy ELH Files Policy


ISE attributes
Can be used to block iPads iPhones etc access to critical hosts