Cisco Cisco Firepower Management Center 2000

Seite von 1844
 
37-22
FireSIGHT System User Guide
 
Chapter 37      Using Host Profiles 
  Working with Host Protocols in the Host Profile
Step 2
Under 
Attributes
, click the name of the host attribute to which you want to assign a value.
A pop-up window appears.
Step 3
Enter a value for the attribute or select a value from the drop-down list.
Step 4
Click 
Save
.
The host attribute value is saved.
Working with Host Protocols in the Host Profile
License: 
FireSIGHT
You can view the protocols running on a host through the host profile. If needed, you can also delete host 
protocols for a particular host from the profile.
Each host profile contains information about the protocols detected in the network traffic associated with 
the host.
Descriptions of the protocol and network layer information follow.
Protocol
The name of a protocol used by the host.
Layer
The network layer where the protocol runs (
Network
 or 
Transport
).
Note that if the host is running a protocol that violates a compliance white list in an activated correlation 
policy, the Defense Center marks the non-compliant protocol with the white list violation icon (
).
You can delete a protocol from a host profile to remove protocols you know are not running on the host. 
Note that deleting a protocol from a host may bring the host into compliance with a compliance white 
list.
Note
If the system detects the protocol again, it re-adds it to the network map and the host profile.
To delete a protocol from a host profile:
Access: 
Admin/Any Security Analyst
Step 1
In the 
Protocols
 section of the host profile, click the delete icon (
) next to the protocol you want to 
delete.
The protocol is deleted for that host. 
Working with White List Violations in the Host Profile
License: 
FireSIGHT