Cisco Cisco Firepower Management Center 4000 Entwickleranleitung

Seite von 102
 
3-17
FireSIGHT System Host Input API Guide
 
Chapter 3      Using the Host Input Import Tool
  Host Input Import Syntax
RemoveFix
You can use the 
RemoveFix
 function to remove a fix mapping from the specified host or server. When 
you remove a fix, vulnerability mappings are updated accordingly. 
Use this syntax:
RemoveFix, ip_addressport, protofix_id
Table 3-13
AddFix Fields 
Field
Description
Required
Values
ip_address
Indicates the string 
containing the IP 
address or addresses for 
the affected host or 
hosts.
Yes (unless MAC 
addresses are 
provided)
A comma-separated list of IP addresses, CIDR blocks, 
and ranges of IP addresses.
port
With the 
proto
 field, 
identifies the server 
affected by the fix on the 
host where the import 
occurs.
Yes, if the fix 
applies to a server
Integers in the range of 1-65535.
proto
With the 
port
 field, 
identifies the server 
affected by the fix on the 
host where the import 
occurs.
No
Either the strings 
tcp
 or 
udp
 or the appropriate 
protocol IDs 
6
 (tcp) or 
17
 (udp).
fix_id
Indicates the 
identification string for 
the fix.
Yes
A Cisco fix identification number or a fix name 
defined in a third-party product map that you use by 
calling the 
SetMap
 function before invoking the 
AddFix
 function. For more information, see 
.
Table 3-14
RemoveFix Fields 
Field
Description
Required
Values
ip_address
Indicates the string containing 
the IP address or addresses for 
the affected host or hosts.
Yes (unless MAC 
addresses are 
provided)
A comma-separated list of IP addresses, CIDR blocks, 
and ranges of IP addresses.
port
With the 
proto
 field, identifies 
the server affected by the fix 
on the host where the import 
occurs.
Yes, if the fix 
applies to a server
Integers in the range of 1-65535.