Cisco Cisco Firepower Management Center 4000
5-20
FireSIGHT System User Guide
Chapter 5 Managing Reusable Objects
Working with Variable Sets
Optionally, you can customize the value of
Var1
in any set. In Custom Set 2 where
Var1
has not been
customized, its value is
192.168.1.0/24
. In Custom Set 1 the customized value
192.168.2.0/24
of
Var1
overrides the default value. Resetting a user-defined variable in the default set resets its default
value to
any
in all sets.
It is important to note in this example that, if you do not update
Var1
in Custom Set 2, further
customizing or resetting
Var1
in the default set consequently updates the current, default value of
Var1
in Custom Set 2, thereby affecting any intrusion policy linked to the variable set.
Although not shown in the example, note that interactions between sets are the same for user-defined
variables and default variables except that resetting a default variable in the default set resets it to the
value configured by Cisco in the current rule update.
variables and default variables except that resetting a default variable in the default set resets it to the
value configured by Cisco in the current rule update.
Examples: Adding a User-Defined Variable to a Custom Set
The next two examples illustrate variable set interactions when you add a user-defined variable to a
custom set. When you save the new variable, you are prompted whether to use the configured value as
the default value for other sets. In the following example, you elect to use the configured value.
custom set. When you save the new variable, you are prompted whether to use the configured value as
the default value for other sets. In the following example, you elect to use the configured value.
Note that, except for the origin of
Var1
from Custom Set 1, this example is identical to the example above
where you added
Var1
to the default set. Adding the customized value
192.168.1.0/24
for
Var1
to
Custom Set 1 copies the value to the default set as a customized value with a default value of
any
.
Thereafter,
Var1
values and interactions are the same as if you had added
Var1
to the default set. As with
the previous example, keep in mind that further customizing or resetting
Var1
in the default set
consequently updates the current, default value of
Var1
in Custom Set 2, thereby affecting any intrusion
policy linked to the variable set.