Cisco Cisco Firepower Management Center 4000
4-32
FireSIGHT System User Guide
Chapter 4 Using the Context Explorer
Understanding the Context Explorer
Hover your pointer over any part of the graph to view more detailed information. Click any part of the
graph to drill down on that information.
graph to drill down on that information.
Note
If you filter on intrusion event information, the Traffic by URL Reputation graph is hidden.
Note that you must have a URL Filtering license and enable URL Filtering for URL filtering graphs to
include URL category and reputation data. Note also that neither the DC500 Defense Center nor Series 2
devices support URL filtering by reputation and category, so the DC500 Defense Center cannot display
this data and Series 2 devices do not detect it. See
include URL category and reputation data. Note also that neither the DC500 Defense Center nor Series 2
devices support URL filtering by reputation and category, so the DC500 Defense Center cannot display
this data and Series 2 devices do not detect it. See
.
This graph draws data primarily from the URL Statistics and Connection Events tables.
Refreshing the Context Explorer
License:
FireSIGHT
The Context Explorer does not automatically update the information it displays. To incorporate new
data, you must manually refresh the explorer.
data, you must manually refresh the explorer.
Note that, although reloading the Context Explorer itself (by refreshing the browser program or
navigating away from, then back to, the Context Explorer) refreshes all displayed information, this does
not preserve any changes you made to section configuration (such as the Ingress/Egress graphs and the
Application Information section) and may cause delays in loading.
navigating away from, then back to, the Context Explorer) refreshes all displayed information, this does
not preserve any changes you made to section configuration (such as the Ingress/Egress graphs and the
Application Information section) and may cause delays in loading.
To refresh the Context Explorer:
Access:
Admin/Any Security Analyst
Step 1
On the Context Explorer, click
Reload
at the upper right.
The explorer updates to display the latest information within your selected time range. Note that the
Reload
button is grayed out until your refresh is finished.