Cisco Cisco Firepower Management Center 2000 Entwickleranleitung
3-2
FireSIGHT System Host Input API Guide
Chapter 3 Using the Host Input Import Tool
Preparing to Run Host Input Imports
Creating a Third-Party Product Map
When you import operating system or server data to a host, you can map third-party product name details
to a Cisco product definition. You can create a third-party product map through the Defense Center web
interface.
to a Cisco product definition. You can create a third-party product map through the Defense Center web
interface.
The third-party product map set allows the system to translate the third-party vendor, product, and
version to the corresponding Cisco definition. When you set a third-party product map containing a
server definition or an operating system definition, within the same script you can then just define the
display strings for a third-party server or operating system when you add or set it using the API.
version to the corresponding Cisco definition. When you set a third-party product map containing a
server definition or an operating system definition, within the same script you can then just define the
display strings for a third-party server or operating system when you add or set it using the API.
If you map third-party fixes to Cisco fix definitions using a third-party product map, set the product map,
and then add fixes to hosts using the third-party fix name, the system maps the fixes to the appropriate
Cisco fix definitions and deactivates vulnerabilities addressed by the fix.
and then add fixes to hosts using the third-party fix name, the system maps the fixes to the appropriate
Cisco fix definitions and deactivates vulnerabilities addressed by the fix.
To map a third-party product to a Cisco product definition:
Access:
Admin
Step 1
Select
Policies
> Application Detectors
, then click
User Third-Party Mappings
.
The User Third-Party Mappings page appears.
Step 2
You have two choices:
•
To edit an existing map set, click
Edit
next to the map set.
•
To create a new map set, click
Create Product Map Set
.
The Edit Third-Party Product Mappings page appears.
Step 3
Type a name for the mapping set in the
Mapping Set Name
field.
Step 4
Type a description in the
Description
field.
Step 5
You have two choices:
•
To map a third-party product, click
Add Product Map.
•
To edit an existing third-party product map, click
Edit
next to the map set.
The Add Product Map page appears.
Step 6
Type the vendor string used by the third-party product in the
Vendor String
field.
Step 7
Type the product string used by the third-party product in the
Product String
field.
Step 8
Type the version string used by the third-party product in the
Version String
field.
Step 9
In the
Product Mappings
section, select the operating system, product, and versions you want to use for
vulnerability mapping from the following lists (if applicable):
•
Vendor
•
Product
•
Major Version
•
Minor Version
•
Revision Version
•
Build
•
Patch
•
Extension