Cisco Cisco Firepower Management Center 4000 Entwickleranleitung

Seite von 102
 
3-3
FireSIGHT System Host Input API Guide
 
Chapter 3      Using the Host Input Import Tool
  Writing Host Input Import Files
For example, if you want a host running a product whose name consists of third-party strings to use the 
vulnerabilities from Red Hat Linux 9, select 
Redhat, Inc.
 as the vendor, 
Redhat Linux
 as the product, and 
9
 
as the version.
Step 10
Click 
Save
.
After you create the third-party product map, you can import data using the 
SetOS
SetService
, or 
AddService
 functions. Note the third-party product name details and Cisco product definition before 
importing data. 
To locate third-party and Cisco product details:
Access: 
Admin
Step 1
Select 
Policies > Application Detectors.
The Application Detectors page appears.
Step 2
Select 
User Third-Party Mappings
The Third-Party Product Mappings page appears.
Step 3
Click the edit icon (
) for your product map set.
The Edit Third-Party Product Mappings page appears.
Step 4
Click the edit icon (
) for your product map.
The Add Product Map pop-up window appears. Note the 
Vendor String
Product String
, and 
Version String
 
values.
For more information on mapping third-party products, see the FireSIGHT System User Guide.
Writing Host Input Import Files
This chapter provides details on the syntax to import data using the import functions of the host input 
import tool. When writing your import file, make sure you follow the instructions provided in the 
following sections:
  •
  •
  •
  •
Understanding Import File Format
To successfully import data using the host input import tool, you must create an import file that conforms 
to the required format. 
Caution
The system discards any data in the import file that it cannot interpret, so you may want to test import 
of your import file before running the import. For more information, see