Cisco Cisco Firepower Management Center 4000

The system provides server settings for improving system performance.

In addition to the various views of intrusion events within the web interface, you can enable logging to 
syslog facilities or send event data to an SNMP trap server. You can specify intrusion event notification 
limits, set up intrusion event notification to external logging facilities, and configure external responses 
to intrusion events.

Admin/Intrusion Admin

Select 

The Intrusion Policy page appears.

Click the edit icon (

) next to the policy you want to edit.

If you have unsaved changes in another policy, click 

 to discard those changes and continue. See 

 for information on saving unsaved changes in another 

policy.

The Policy Information page appears.

To select the advanced setting you want to modify, click 

 in the navigation panel on the 

left, enable the configuration if it is disabled, then click 

.

The configuration page appears. You can modify any of the configuration options for the advanced 
setting you selected.

Global Rule Thresholding

Event Queue Configuration

Latency-Based Packet Handling

Latency-Based Rule Handling

Performance Statistics Configuration

Regular Expression Limits

Rule Processing Configuration

SNMP Alerting

Syslog Alerting