Cisco Cisco Firepower Management Center 4000

If you selected 

 as the Table Type in step 

, then add 

 as a table column, 

the IP Address column does not appear when you are viewing vulnerabilities using your custom 
workflow, unless you use the search feature to constrain the workflow to view a specific IP 
address or block of addresses. For more information on searching for vulnerabilities, see 

.

Optionally, click 

 to add a table view page to the workflow.

You must add at least one drill-down page or a table view of events to a custom workflow.

Click 

.

The new workflow is saved and added to the list of custom workflows.

FireSIGHT

Custom workflows based on connection data are like other custom workflows, except you can include 
connection data graph pages as well as drill-down pages and table view pages. You can include as many 
of each type of page in the workflow as you want, in any order. Each connection data graph page contains 
a single graph, which can be a line graph, bar graph, or pie chart. On line and bar graphs, you may include 
more than one dataset. For more information on connection data, including connection summaries, 
connection graphs, and datasets, see 

.

Instead of creating a new custom workflow, you can export a custom workflow from another appliance 
and then import it onto your appliance. You can then edit the imported workflow to suit your needs. For 
more information, see 

Admin

Select 

.

Click 

.

The Edit Custom Workflow page appears.

Type a name for the workflow in the 

 field.

You can use up to 60 alphanumeric characters and spaces.

Optionally, type a description for the workflow in the 

 field.

You can use up to 80 alphanumeric characters and spaces.

From the 

drop-down list, select 

.

Optionally, add one or more drill-down pages to the workflow:

To add a drill-down page that contains data on individual connections, click 

.