Cisco Cisco Firepower Management Center 4000 Entwickleranleitung
3-17
FireSIGHT System Host Input API Guide
Chapter 3 Using the Host Input Import Tool
Host Input Import Syntax
RemoveFix
You can use the
RemoveFix
function to remove a fix mapping from the specified host or server. When
you remove a fix, vulnerability mappings are updated accordingly.
Use this syntax:
RemoveFix, ip_address, port, proto, fix_id
Table 3-13
AddFix Fields
Field
Description
Required
Values
ip_address
Indicates the string
containing the IP
address or addresses for
the affected host or
hosts.
containing the IP
address or addresses for
the affected host or
hosts.
Yes (unless MAC
addresses are
provided)
addresses are
provided)
A comma-separated list of IP addresses, CIDR blocks,
and ranges of IP addresses.
and ranges of IP addresses.
port
With the
proto
field,
identifies the server
affected by the fix on the
host where the import
occurs.
affected by the fix on the
host where the import
occurs.
Yes, if the fix
applies to a server
applies to a server
Integers in the range of 1-65535.
proto
With the
port
field,
identifies the server
affected by the fix on the
host where the import
occurs.
affected by the fix on the
host where the import
occurs.
No
Either the strings
tcp
or
udp
or the appropriate
protocol IDs
6
(tcp) or
17
(udp).
fix_id
Indicates the
identification string for
the fix.
identification string for
the fix.
Yes
A Cisco fix identification number or a fix name
defined in a third-party product map that you use by
calling the
defined in a third-party product map that you use by
calling the
SetMap
function before invoking the
AddFix
function. For more information, see
.
Table 3-14
RemoveFix Fields
Field
Description
Required
Values
ip_address
Indicates the string containing
the IP address or addresses for
the affected host or hosts.
the IP address or addresses for
the affected host or hosts.
Yes (unless MAC
addresses are
provided)
addresses are
provided)
A comma-separated list of IP addresses, CIDR blocks,
and ranges of IP addresses.
and ranges of IP addresses.
port
With the
proto
field, identifies
the server affected by the fix
on the host where the import
occurs.
on the host where the import
occurs.
Yes, if the fix
applies to a server
applies to a server
Integers in the range of 1-65535.