Cisco Cisco Firepower Management Center 4000

Page of 1844
 
50-16
FireSIGHT System User Guide
 
Chapter 50      Managing System Policies 
  Configuring a System Policy
The Database page appears.
Step 4
For each of the databases, enter the number of records you want to store.
For information on how many records each database can maintain, see the 
 table.
Step 5
Optionally, in the 
Data Pruning Notification Address
 field, enter the email address you want to receive 
notifications when intrusion events, discovery events, audit records, security intelligence data, or URL 
filtering data are pruned from the appliance’s database.
Note that you must also configure an email server. See 
 for more information.
Step 6
Click 
Save Policy and Exit
.
The system policy is updated. Your changes do not take effect until you apply the system policy. See 
 for more information.
Configuring DNS Cache Properties
License: 
Any
If you have a DNS server configured on the Network page, you can configure the appliance to resolve 
IP addresses automatically on the event view pages. As a user assigned the Administrator role, you can 
also configure basic properties for DNS caching performed by the appliance. Configuring DNS caching 
allows you to identify IP addresses you previously resolved without performing additional lookups. This 
can reduce the amount of traffic on your network and speed the display of event pages when IP address 
resolution is enabled.
To configure the DNS cache properties:
Access: 
Admin
Step 1
Select 
System > Local > System Policy
.
The System Policy page appears.
Step 2
You have the following options:
  •
To modify the DNS cache settings in an existing system policy, click the edit icon (
) next to the 
system policy.
  •
To configure the DNS cache settings as part of a new system policy, click 
Create Policy
.
Provide a name and description for the system policy as described in 
, and click 
Save
.
In either case, the Access List page appears.
Step 3
Click 
DNS Cache
.
The DNS Cache page appears.
Step 4
Select 
Enabled 
from the 
DNS Resolution Caching
 drop-down list to enable caching. Select 
Disabled
 to disable 
it.