Cisco Cisco Firepower Management Center 4000

Page of 1844
 
42-32
FireSIGHT System User Guide
 
Chapter 42      Enhancing Network Discovery 
  Importing Host Input Data
Step 7
Type the product string used by the third-party product in the 
Product String
 field.
Step 8
Type the version string used by the third-party product in the 
Version String
 field. 
Step 9
In the Product Mappings section, select the operating system, product, and versions you want to use for 
vulnerability mapping from the following lists (if applicable):
 •
Vendor
 •
Product
 
Major  Version
 •
Minor Version
 •
Revision Version
 
Build
 
Patch
 •
Extension
For example, if you want a host running a product whose name consists of third-party strings to use the 
vulnerabilities from Red Hat Linux 9, select 
Redhat, Inc.
 as the vendor, 
Redhat Linux
 as the product, and 
9
 
as the version.
Step 10
Click 
Save
.
Mapping Third-Party Product Fixes
License: 
FireSIGHT
If you map a fix name to a particular set of fixes in the database, you can then import data from a 
third-party patch management application and apply the fix to a set of hosts. When the fix name is 
imported to a host, the system marks all vulnerabilities addressed by the fix as invalid for that host.
To map third-party fixes to Cisco fix definitions:
Access: 
Admin/
Step 1
Select 
Policies
 
> Application Detectors
, then click 
User Third-Party Mappings
.
The User Third-Party Mappings page appears.
Step 2
You have two choices:
  •
To edit an existing map set, click 
Edit
 next to the map set.
  •
To create a new map set, click 
Create Product Map Set
.
The Edit Third-Party Product Mappings page appears. 
Step 3
Type a name for the mapping set in the 
Mapping Set Name
 field.
Step 4
Type a description in the 
Description
 field.
Step 5
You have two choices:
  •
To map a third-party product, click 
Add Fix Map. 
  •
To edit an existing third-party product map, click 
Edit
 next to it. 
The Add Fix Map page appears.
Step 6
Type the name of the fix you want to map in the 
Third-Party Fix Name 
field.