Cisco Cisco Firepower Management Center 2000
2-15
FireSIGHT User Agent Configuration Guide
Chapter 2 Setting up a User Agent
Configuring a User Agent
The updated settings are applied to the agent.
Step 9
You have the following options:
•
To add or remove IP addresses to the excluded IP address list, select the
Excluded Addresses
tab. For
more information, see
•
.
Configuring User Agent Excluded Addresses Settings
License:
FireSIGHT
You can configure up to 100 IPv4 or IPv6 addresses to be excluded when polling for login events. If the
agent retrieves a login or logoff event that contains an excluded IP address, the agent does not report the
event to the Defense Center. Login and logoff events from an IP address that are reported before the
exclusion are not affected. If you remove an IP address from the excluded address list, future login and
logoff events for that address are reported to the Defense Center.
agent retrieves a login or logoff event that contains an excluded IP address, the agent does not report the
event to the Defense Center. Login and logoff events from an IP address that are reported before the
exclusion are not affected. If you remove an IP address from the excluded address list, future login and
logoff events for that address are reported to the Defense Center.
To configure excluded IP addresses:
Access:
Any
Step 1
Select the
Excluded Addresses
tab.
Step 2
In the next available row, type an IP address you want to exclude in the
Address
column. Repeat this to
add additional IP addresses. If you have more than one excluded IP address configured, you can sort on
Address
by clicking on the respective column headers.
If you enter an invalid IP address, an exclamation mark icon (
) appears in the row header. You cannot
enter another address without fixing the invalid address.
Step 3
To remove an IP address, highlight the row and press the Delete key.
The IP address is removed. To remove multiple rows, Ctrl-click to select multiple rows and press the
Delete key.
Delete key.
Step 4
To export the list of IP addresses to a comma-separated value file, click
Export List
. Select a file path to
save the file.
The file is saved. By default, the file is named
Sourcefire_user_agent_excluded_addresses.csv
.
Step 5
To import a list of IP addresses from a comma-separated value file, click
Import List
. Select a file to
upload.
The existing IP addresses are cleared, and the IP addresses in the file are loaded. You cannot upload a
file that contains duplicate IP addresses. If there are any syntax errors in the file, you cannot upload the
file.
file that contains duplicate IP addresses. If there are any syntax errors in the file, you cannot upload the
file.
Step 6
Click
Save
to save and apply configuration changes to the agent.
The updated settings are applied to the agent.
Step 7
You have the following options:
•
To view the log message and configure logging, select the
Logs
tab. For more information, see
.