Cisco Cisco Firepower Management Center 4000

After you create a custom product mapping, you must activate the custom product mapping list. After 
you activate a list of custom product mappings, the system updates all servers with occurrences of the 
specified vendor strings. For data imported through the host input feature, vulnerabilities update unless 
you have already explicitly set the product mappings for this server. 

If, for example, your company modifies the banner for your Apache Tomcat web servers to read 

Internal Web Server

, you can map the vendor string 

Internal Web Server

 to the vendor 

 and 

the product 

, then activate the list containing that mapping, all hosts where a server labelled 

Internal Web Server

 occurs have the vulnerabilities for Apache Tomcat in the database.

You can use this feature to map vulnerabilities to local intrusion rules by mapping the SID for the rule 
to another vulnerability. 

Admin

Select 

 

, and click 

.

The Custom Product Mappings page appears.

Click 

.

The Edit Custom Product Mappings List page appears. 

Type a name in the 

 field.

Click 

.

The Add Vendor String pop-up window appears.

In the 

 field, type the vendor string that identifies the applications that should map to the 

selected vendor and product values.

Select the vendor you want to map to from the 

 drop-down list.

Select the product you want to map to from the 

 drop-down list.

Click 

 to add the mapped vendor string to the list. 

Optionally, repeat steps 

 to 

 as needed to add additional vendor string mappings to the list. 

When you finish, click 

.

The Custom Product Mappings page appears again, with the list you added.

FireSIGHT

You can modify existing custom product mapping lists by adding or removing vendor strings or changing 
the list name. 

Admin

Select 

 

, then click 

.