FY24 Cisco Threat IPS

DFAS I&T Infrastructure Services requires the renewal of software maintenance Threat Defense Malware for the current Cisco Firepower Intrusion Prevention Systems (IPS). Cisco Firepower IPS protects DFAS systems from network attacks by selectively enforcing a policy at the network perimeter. DFAS network security uses HTTPS inspection to protect critical Internet-facing applications. Therefore, there is a requirement to decrypt and inspect HTTPS traffic and to send event data to the existing central forensics database and have active fail-over capability and power-off passthrough, which limits the risk of software failure.