Cisco Cisco Firepower Management Center 4000

Page of 1844
 
4-32
FireSIGHT System User Guide
 
Chapter 4      Using the Context Explorer 
  Understanding the Context Explorer
Hover your pointer over any part of the graph to view more detailed information. Click any part of the 
graph to drill down on that information.
Note
If you filter on intrusion event information, the Traffic by URL Reputation graph is hidden. 
Note that you must have a URL Filtering license and enable URL Filtering for URL filtering graphs to 
include URL category and reputation data. Note also that neither the DC500 Defense Center nor Series 2 
devices support URL filtering by reputation and category, so the DC500 Defense Center cannot display 
this data and Series 2 devices do not detect it. See 
.
This graph draws data primarily from the URL Statistics and Connection Events tables.
Refreshing the Context Explorer
License: 
FireSIGHT
The Context Explorer does not automatically update the information it displays. To incorporate new 
data, you must manually refresh the explorer.
Note that, although reloading the Context Explorer itself (by refreshing the browser program or 
navigating away from, then back to, the Context Explorer) refreshes all displayed information, this does 
not preserve any changes you made to section configuration (such as the Ingress/Egress graphs and the 
Application Information section) and may cause delays in loading.
To refresh the Context Explorer:
Access: 
Admin/Any Security Analyst
Step 1
On the Context Explorer, click 
Reload
 at the upper right.
The explorer updates to display the latest information within your selected time range. Note that the 
Reload
 button is grayed out until your refresh is finished.