Cisco Cisco Firepower Management Center 4000
42-15
FireSIGHT System User Guide
Chapter 42 Enhancing Network Discovery
Using Custom Fingerprinting
Deactivating Fingerprints
License:
FireSIGHT
If you want to stop using a fingerprint, you can deactivate it. Deactivating a fingerprint causes a
fingerprint to no longer be used, but allows it to remain on the system. When you deactivate a fingerprint,
the operating system is marked as unknown for hosts that use the fingerprint. If the hosts are detected
again and match a different active fingerprint, they are then identified by that active fingerprint.
fingerprint to no longer be used, but allows it to remain on the system. When you deactivate a fingerprint,
the operating system is marked as unknown for hosts that use the fingerprint. If the hosts are detected
again and match a different active fingerprint, they are then identified by that active fingerprint.
Deleting a fingerprint removes it from the system completely. After deactivating a fingerprint, you can
delete it.
delete it.
To deactivate an active fingerprint:
Access:
Admin/Discovery Admin
Step 1
Select
Policies
>
Network Discovery
, then click
Custom Operating Systems
.
The Custom Fingerprint page appears.
Step 2
Click the slider next to the active fingerprint you want to deactivate.
The Defense Center deactivates the fingerprint and propagates the deactivation to all managed devices.
Deleting Fingerprints
License:
FireSIGHT
If you no longer have use for a fingerprint, you can delete it from the system. Note that you must
deactivate fingerprints before you can delete them.
deactivate fingerprints before you can delete them.
To delete a fingerprint:
Access:
Admin/Discovery Admin
Step 1
Select
Policies
>
Network Discovery
, then click
Custom Operating Systems
.
The Custom Fingerprint page appears.
Step 2
If the fingerprints you want to delete are active, click the slider icon next to each one to deactivate it.
Step 3
Click the delete icon (
) next to the fingerprint you want to delete.
Step 4
Click
OK
to confirm that you want to delete the fingerprint.
The fingerprint is deleted.
Editing Fingerprints
License:
FireSIGHT
After you create a fingerprint, you can view or edit it. This allows you to make changes and resubmit the
fingerprint or add additional vulnerability mappings to it. You can modify fingerprints whether they are
active or inactive, but depending on a fingerprint’s state, the things that can be modified differ.
fingerprint or add additional vulnerability mappings to it. You can modify fingerprints whether they are
active or inactive, but depending on a fingerprint’s state, the things that can be modified differ.