Cisco Cisco Firepower Management Center 4000

Page of 1844
 
38-44
FireSIGHT System User Guide
 
Chapter 38      Working with Discovery Events 
  Working with Application Details
Last Used
The time that the application was last used or the time that the application data was updated using 
the host input feature. The Last Used value is updated at least as often as the update interval you 
configured in the network discovery policy, as well as when the system detects an application 
information update. For information on setting the update interval, see 
IP Address
The IP address associated with the host using the application.
Client
The name of the application. Note that if the system detected an application protocol but could not 
detect a specific client, 
client
 is appended to the application protocol name to provide a generic 
name.
Version
The version of the application.
Category, Tags, Risk, or Business Relevance for Clients
The categories, tags, risk level, and business relevance assigned to the client. These filters can be 
used to focus on a specific set of data.
For more information, see 
Application Protocol
The application protocol used by the application. Note that if the system detected an application 
protocol but could not detect a specific client, 
client
 is appended to the application protocol name 
to provide a generic name.
Category, Tags, Risk, or Business Relevance for Application Protocols
The categories, tags, risk level, and business relevance assigned to the application protocol. These 
filters can be used to focus on a specific set of data.
For more information, see 
Web Application
The web application based on the payload content or URL detected by the system in the http traffic. 
Note that if the system detects an application protocol of 
HTTP
 but cannot detect a specific web 
application, the system supplies a generic web browsing designation here.
Category, Tags, Risk, or Business Relevance for Web Applications
The categories, tags, risk level, and business relevance assigned to the web application. These filters 
can be used to focus on a specific set of data.
For more information, see 
Hits
The number of times the system detected the application in use. For applications added using the 
host input feature, this value is always 
0
.
Device
The device that generated the discovery event containing the application detail.