Cisco Cisco Firepower Management Center 2000

Seite von 1844
 
27-24
FireSIGHT System User Guide
 
Chapter 27      Using the FireSIGHT System as a Compliance Tool 
  Working with Shared Host Profiles
Shared host profiles specify which operating systems, clients, application protocols, web applications, 
and protocols are allowed to run on target hosts across multiple white lists. That is, if you create multiple 
white lists but want to use the same host profile to evaluate hosts running a particular operating system 
across the white lists, use a shared host profile. Note that the default white list uses a special category of 
shared host profiles, called built-in host profiles.
For a more detailed introduction to shared host profiles, see 
.
You can create, modify, and delete shared host profiles. In addition, if you modify or delete any of the 
built-in shared host profiles, or modify or delete any of the built-in application protocols, protocols, or 
clients, you can reset them to their factory defaults. For more information, see:
  •
  •
  •
  •
After you create a shared host profile, you can add it to multiple white lists. For more information, see 
Creating Shared Host Profiles
License: 
FireSIGHT
Create a shared host profile if you want to use the same host profile to evaluate hosts running a particular 
operating system across multiple white lists.
Tip
You can also create a shared host profile for your compliance white lists using the host profile of a 
specific host. For more information, see 
To create a shared host profile:
Access: 
Admin 
Step 1
Select 
Policies > Correlation
, then click 
White List
.
The White List page appears.
Step 2
Click 
Edit Shared Profiles
.
The Edit Shared Profiles page appears.
Step 3
Optionally, survey your network.
Surveying your network creates several baseline shared white lists based on the data the system has 
accumulated about your network. This saves you from manually creating and configuring multiple 
shared host profiles. You have two options:
  •
To survey your network, click 
Survey Network
. For more information, see 
.