Cisco Cisco Firepower Management Center 4000

For information on network monitoring, see 

. For 

information on adding network objects to the Available Networks list, see 

. Note that If you modify a network object used in the network discovery policy, you must 

reapply the policy for those changes to take effect for discovery.

Optionally, to restrict the rule actions to traffic in specific zones, click 

, select a zone or zones from 

the 

 list, and click 

.

For information on selecting zones for monitoring, see 

To exclude ports from monitoring, click 

.

The Port Exclusions page appears.

To exclude specific source ports from monitoring, you have two options:

Select a port or ports from the 

 list and click 

. 

To exclude traffic from a specific source port without adding a port object, under the 

 list, select the appropriate protocol from the 

 drop-down list, type a port number from 

1 to 65535 into the 

 field, and click 

. 

For information on excluding ports from monitoring, see 

. For information on adding port objects to the Available Ports list, see 

. Note that if you modify a port object used in the network discovery policy, you 

must reapply the policy for those changes to take effect for discovery.

To exclude specific destination ports from monitoring, you have two options:

Select a port or ports from the 

 list and click 

.

To exclude traffic from a specific destination port without adding a port object, under the 

 list, select the appropriate protocol from the 

 drop-down list, type a port 

number from 1 to 65535 into the 

 field, and click 

. 

If you are finished editing the rule, click 

 to return to the discovery policy rule list.

You must apply the network discovery policy for your changes to take effect. For more 
information, see 

.

FireSIGHT

The list of available networks that appears in a discovery rule contains reusable network object and 
groups that can be used anywhere in the FireSIGHT System. You can add new network objects to the 
list. Note that when you modify an object referenced in a rule, you must reapply the network discovery 
policy for those changes to take effect.

Admin/Discovery Admin

Select 

.

The Network Discovery Policy page appears.