Cisco Cisco Firepower Management Center 4000

Page of 1844
 
5-20
FireSIGHT System User Guide
 
Chapter 5      Managing Reusable Objects 
  Working with Variable Sets
Optionally, you can customize the value of 
Var1
 in any set. In Custom Set 2 where 
Var1
 has not been 
customized, its value is 
192.168.1.0/24
. In Custom Set 1 the customized value 
192.168.2.0/24 
of 
Var1 
overrides the default value. Resetting a user-defined variable in the default set resets its default 
value to 
any
 in all sets.
It is important to note in this example that, if you do not update 
Var1
 in Custom Set 2, further 
customizing or resetting 
Var1
 in the default set consequently updates the current, default value of 
Var1
 
in Custom Set 2, thereby affecting any intrusion policy linked to the variable set.
Although not shown in the example, note that interactions between sets are the same for user-defined 
variables and default variables except that resetting a default variable in the default set resets it to the 
value configured by Cisco in the current rule update.
Examples: Adding a User-Defined Variable to a Custom Set
The next two examples illustrate variable set interactions when you add a user-defined variable to a 
custom set. When you save the new variable, you are prompted whether to use the configured value as 
the default value for other sets. In the following example, you elect to use the configured value.
Note that, except for the origin of 
Var1
 from Custom Set 1, this example is identical to the example above 
where you added 
Var1
 to the default set. Adding the customized value 
192.168.1.0/24
 for 
Var1
 to 
Custom Set 1 copies the value to the default set as a customized value with a default value of 
any
Thereafter, 
Var1
 values and interactions are the same as if you had added 
Var1
 to the default set. As with 
the previous example, keep in mind that further customizing or resetting 
Var1
 in the default set 
consequently updates the current, default value of 
Var1
 in Custom Set 2, thereby affecting any intrusion 
policy linked to the variable set.