Cisco Cisco Firepower Management Center 4000
40-14
FireSIGHT System User Guide
Chapter 40 Creating Traffic Profiles
Understanding Condition-Building Mechanics
Logically, the above traffic profile is evaluated as follows:
(A and (B or C))
To add a single condition:
Access:
Admin/Discovery Admin
Step 1
To add a single condition, click
Add condition
above the current condition.
A new condition is added to the same logical level as the current set of conditions. By default, it is linked
to the conditions on its level with the
to the conditions on its level with the
OR
operator, though you can change the operator to
AND
.
For example, if you add a simple condition to the following host profile qualification:
The result is:
Where...
Is the condition that states...
A
Application Protocol Name is HTTP
B
IP Address is in 10.4.0.0/16
C
IP Address is in 192.168.0.0/16