Cisco Cisco Firepower Management Center 2000
20-13
FireSIGHT System User Guide
Chapter 20 Configuring Intrusion Policies
Managing Intrusion Policies
Using the Intrusion Policy Comparison Report
License:
Protection
An intrusion policy comparison report is a record of all differences between two intrusion policies or
two revisions of the same intrusion policy identified by the intrusion policy comparison view, presented
as a PDF. You can use this report to further examine the differences between two intrusion policy
configurations and to save and disseminate your findings.
two revisions of the same intrusion policy identified by the intrusion policy comparison view, presented
as a PDF. You can use this report to further examine the differences between two intrusion policy
configurations and to save and disseminate your findings.
You can generate an intrusion policy comparison report from the comparison view for any intrusion
policies to which you have access. Remember to commit any potential changes before you generate an
intrusion policy report; only committed changes appear in the report.
policies to which you have access. Remember to commit any potential changes before you generate an
intrusion policy report; only committed changes appear in the report.
The format of the intrusion policy comparison report is the same as the intrusion policy report with one
exception: the intrusion policy report contains all settings in the intrusion policy, and the intrusion policy
comparison report lists only those settings which differ between the policies.
exception: the intrusion policy report contains all settings in the intrusion policy, and the intrusion policy
comparison report lists only those settings which differ between the policies.
Depending on your configuration, an intrusion policy comparison report can contain one or more
sections as described in the
sections as described in the
table.
The following sample graphic displays the Advanced Settings section of an intrusion policy comparison
report, and lists the configuration for each advanced setting for both intrusion policy configurations.
Each section uses the same format and provides the same level of detail. Note that the Value A and Value
B columns represent the policies or policy revisions you configured in the comparison view.
report, and lists the configuration for each advanced setting for both intrusion policy configurations.
Each section uses the same format and provides the same level of detail. Note that the Value A and Value
B columns represent the policies or policy revisions you configured in the comparison view.
You use a similar procedure to compare other types of policies on the FireSIGHT System. For more
information, see:
information, see:
•
•
To compare two intrusion policies or two revisions of the same policy:
Access:
Admin/Intrusion Admin
Step 1
Select
Policies > Intrusion > Intrusion Policy.
The Intrusion Policy page appears.
Step 2
Click
Compare Policies
.
The
Select Comparison
window appears.
Step 3
From the
Compare Against
drop-down list, select the type of comparison you want to make:
•
To compare two different policies, select
Other Policy
.
generate a new intrusion policy
comparison view
comparison view
click
New Comparison.
The
Select Comparison
window appears. See
for more information.
generate an intrusion policy
comparison report
comparison report
click
Comparison Report
.
The intrusion policy comparison report creates a PDF that lists
only the differences between the two intrusion policies or
intrusion policy versions.
only the differences between the two intrusion policies or
intrusion policy versions.
Table 20-4
Intrusion Policy Comparison View Actions (continued)
To...
You can...