Cisco Cisco Firepower Management Center 2000 Entwickleranleitung

Seite von 102
 
3-2
FireSIGHT System Host Input API Guide
 
Chapter 3      Using the Host Input Import Tool 
  Preparing to Run Host Input Imports
Creating a Third-Party Product Map
When you import operating system or server data to a host, you can map third-party product name details 
to a Cisco product definition. You can create a third-party product map through the Defense Center web 
interface. 
The third-party product map set allows the system to translate the third-party vendor, product, and 
version to the corresponding Cisco definition. When you set a third-party product map containing a 
server definition or an operating system definition, within the same script you can then just define the 
display strings for a third-party server or operating system when you add or set it using the API. 
If you map third-party fixes to Cisco fix definitions using a third-party product map, set the product map, 
and then add fixes to hosts using the third-party fix name, the system maps the fixes to the appropriate 
Cisco fix definitions and deactivates vulnerabilities addressed by the fix. 
To map a third-party product to a Cisco product definition:
Access: 
Admin
Step 1
Select 
Policies
 
> Application Detectors
, then click 
User Third-Party Mappings
.
The User Third-Party Mappings page appears.
Step 2
You have two choices:
  •
To edit an existing map set, click 
Edit
 next to the map set.
  •
To create a new map set, click 
Create Product Map Set
.
The Edit Third-Party Product Mappings page appears. 
Step 3
Type a name for the mapping set in the 
Mapping Set Name
 field.
Step 4
Type a description in the 
Description
 field.
Step 5
You have two choices:
  •
To map a third-party product, click 
Add Product Map. 
  •
To edit an existing third-party product map, click 
Edit
 next to the map set. 
The Add Product Map page appears.
Step 6
Type the vendor string used by the third-party product in the 
Vendor String
 field.
Step 7
Type the product string used by the third-party product in the 
Product String
 field.
Step 8
Type the version string used by the third-party product in the 
Version String
 field. 
Step 9
In the 
Product Mappings
 section, select the operating system, product, and versions you want to use for 
vulnerability mapping from the following lists (if applicable):
 •
Vendor
 •
Product
 
Major  Version
 •
Minor Version
 •
Revision Version
 
Build
 
Patch
 •
Extension