Cisco Cisco Firepower Management Center 2000

Seite von 1844
 
51-16
FireSIGHT System User Guide
 
Chapter 51      Configuring Appliance Settings 
  Managing Remote Storage
Step 7
Optionally, click 
Test
.
The test ensures that the Defense Center can access the designated host and directory.
Step 8
Click 
Save
.
Your remote storage configuration is saved.
Using SSH for Remote Storage
License: 
Any
You can select 
SSH
 to use secure copy (SCP) to store your reports and backups. Optionally, select the 
Use 
Advanced Options
 check box to use one of the mount binary options as documented in a SSH mount man 
page.
Caution
If you enable STIG compliance on an appliance, you cannot use SSH for remote storage for that 
appliance. For more information, see 
.
To store backups and reports using SSH:
Access: 
Admin
Step 1
Select 
System > Local > Configuration
.
The Information page appears.
Step 2
Click 
Remote Storage Device
.
The Remote Storage Device page appears.
Step 3
At 
Storage Type
, select
 SSH
.
The page refreshes to display the SCP via SSH storage configuration options.
Step 4
Add the connection information:
  •
Enter the IP address or hostname of the storage system in the 
Host
 field.
  •
Enter the path to your storage area in the 
Directory
 field.
  •
Enter the storage system’s user name in the 
Username
 field and the password for that user in the 
Password
 field. To specify a domain, precede the user name with the domain followed by a forward 
slash (/). 
  •
To use SSH keys, copy the content of the 
SSH Public Key
 field and place it in your authorized_keys 
file.
Step 5
If there are any required command line options, select 
Use Advanced Options
Command Line Options
 field appears where you can enter mount binary options. 
Step 6
Under System Usage, select either or both of the following:
  •
Select
 Use for Backups
 to store backups on the designated host.
  •
Select 
Use for Reports
 to store reports on the designated host.
Step 7
Optionally, click 
Test
.
The test ensures that the Defense Center can access the designated host and directory.