Cisco Cisco FirePOWER Appliance 7115

Version 5.3

Sourcefire 3D System User Guide

152

Using the Context Explorer

Understanding the Context Explorer

Chapter 3

FireAMP subscription, on the endpoints where your users installed FireAMP 

Connectors.

If you filter on intrusion information, the entire Files Information 

Section is hidden. 

Note that you must have a Malware license and enable malware detection for 

Files Information graphs to include network-based malware data. Note also that 

neither the DC500 Defense Center nor Series 2 devices support advanced 

malware detection, so the DC500 Defense Center cannot display this data and 

Series 2 devices do not detect it. See 

For more information on the graphs in the Files Information section, see the 

following topics:

Viewing the Top File Types Graph

: Protection or Malware

: feature dependent

: feature dependent

The Top File Types graph, in donut form, displays a proportional view of the file 

types detected in network traffic (outer ring), grouped by file category (inner ring).

Hover your pointer over any part of the graph to view more detailed information. 

Click any part of the graph to filter or drill down on that information.