Cisco Cisco Firepower Management Center 4000

Seite von 1844
 
37-12
FireSIGHT System User Guide
 
Chapter 37      Using Host Profiles 
  Working with Operating Systems in the Host Profile
Tip
Click the delete icon (
) next to any operating system identity to remove the identity from the 
Operating System Identity Information pop-up window and, if applicable, to update the current identity 
for the operating system in the host profile. Note that you cannot delete Cisco-detected operating system 
identities.
Editing an Operating System
License: 
FireSIGHT
You can set the current operating system identity for a host using the FireSIGHT System web interface. 
Setting the identity through the web interface overrides all other identity sources so that identity is used 
for vulnerability assessment and impact correlation. However, note that if the system detects a 
conflicting operating system identity for the host after you edit the operating system, an operating 
system conflict occurs.
Both operating systems are then considered current until you resolve the conflict. For more information, 
see 
To change the operating system identity:
Access: 
Admin/Any Security Analyst
Step 1
In a host profile, click 
Edit
 in the 
Operating System
 section.
A pop-up window appears where you can set the operating system identity.
Step 2
You have several options: 
  •
Select 
Current Definition
 from the 
OS Definition
 drop-down list to confirm the current operating system 
identity through host input, then skip to step 
.
  •
Select a variation on the current operating system identity from the 
OS Definition
 drop-down list, then 
skip to step 
  •
Select 
User-Defined
 from the 
OS Definition
 drop-down list, then continue with step 
Step 3
Optionally, select 
Use Custom Display String
 and modify the custom strings you want to display in the 
Vendor String
Product String
, and 
Version String
 fields.
Step 4
Optionally, to change to an operating system from a different vendor, select the vendor and other 
operating system details from the 
Vendor
 and 
Product
 drop-down lists.
Step 5
Optionally, to configure the operating system product release level, select the applicable items in the 
Major
Minor
Revision
Build, Patch, 
and 
Extension 
drop-down lists.
Step 6
Optionally, if you want to indicate that fixes for the operating system have been applied, click 
Configure 
Fixes
.
The list of available package fixes displays.
Step 7
Choose the applicable fixes in the drop-down list and click 
Add
.
Step 8
Optionally, add the relevant patches and extensions using the 
Patch
 and 
Extension
 drop-down lists.
Step 9
Click 
Finish
 to complete the operating system identity configuration.