Cisco Cisco Firepower Management Center 4000

Click 

 if you are modifying an existing search and want to save your changes.

Click 

 to save the search criteria. The search is saved (and associated with your 

user account if you selected 

) so that you can run it at a later time.

FireSIGHT

The system generates an event when it detects a host and collects information about it to build the host 
profile. You can use the Defense Center web interface to view, search, and delete hosts.

While viewing hosts, you can create traffic profiles and compliance white lists based on selected hosts. 
You can also assign host attributes, including host criticality values (which designate business criticality) 
to groups of hosts. You can then use these criticality values, white lists, and traffic profiles within 
correlation rules and policies. 

Although you can configure the network discovery policy to add hosts to the network map based on data 
exported by NetFlow-enabled devices, the available information about these hosts is limited. For 
example, there is no operating system data available for these hosts, unless you provide it using the host 
input feature. For more information, see 

For more information, see the following sections:

FireSIGHT

You can use the Defense Center to view a table of hosts that the system has detected. Then, you can 
manipulate the view depending on the information you are looking for.

The page you see when you access hosts differs depending on the workflow you use. Both predefined 
workflows terminate in a host view, which contains a host profile for every host that meets your 
constraints. You can also create a custom workflow that displays only the information that matches your 
specific needs. For more information, see 

.

The 

 below describes some of the specific actions you can perform on an hosts workflow 

page. You can also perform the tasks described in the