Cisco Cisco Firepower Management Center 4000

Admin/Any Security Analyst

Select 

.

The Context Explorer appears.

Hover your pointer over the 

 section. (Note that if you previously changed 

this setting in the same Context Explorer session, the section title may appear as 

 or 

 instead.)

The section option buttons appear at the upper right.

Click 

, 

, or 

.

The Application Information section refreshes according to the option you selected.

If you navigate away from the Context Explorer, this section reverts to its default state 
(Application Protocol).

FireSIGHT

The Traffic by Risk/Business Relevance and Application graph, in donut form, displays a proportional 
representation of application traffic detected on your monitored network, arranged by the applications’ 
estimated risk (the default) or estimated business relevance. The inner ring divides by estimated 
risk/business relevance level (such as 

Medium

 or 

High

), while the outer ring further divides that data by 

specific application (such as 

SSH

 or 

NetBIOS

). Scarcely detected applications are grouped under 

.

Note that this graph reflects all available data regardless of date and time constraints. If you change the 
explorer time range, the graph does not change.

Hover your pointer over any part of the graph to view more detailed information. Click any part of the 
graph to filter or drill down on that information.