Cisco Cisco Firepower Management Center 4000

Page of 1844
 
Glossary
GL-19
FireSIGHT System User Guide
 
derived fingerprint
An operating system 
 created by the system from all passively collected fingerprints for a 
by applying a formula which calculates the most likely identity, using the confidence value of each 
collected fingerprint and the amount of corroborating fingerprint data between identities.
device
A fault-tolerant, purpose-built 
 available in a range of throughputs. Depending on the licensed 
capabilities you enable on your devices, you can use them to passively monitor traffic to build a 
comprehensive map of your network assets, 
 traffic, and 
, perform 
, and configure switching and routing. You must 
manage devices with a 
device clustering
See 
device stacking
See 
.
discovery
A component of the FireSIGHT System that uses managed 
s to monitor your network and provide 
you with a complete, persistent view of your network. Network discovery determines the number and 
types of 
s (including 
s) on your network, as well as information 
about the operating systems, active 
s, and open ports on those hosts. You can also configure 
Cisco managed devices to monitor 
 on your network, which allows you to identify the source 
of policy breaches, attacks, or network vulnerabilities.
discovery data
Host, user, and 
 information that qualifies your network assets and traffic flow, as gathered 
by the 
 feature.
discovery event
An 
 that details the 
 of new assets or changes to existing assets. A 
special kind of discovery event. Sometimes, Cisco uses the term “discovery event” as a general reference 
to any 
 information.
discovery policy
See 
discovery rule
Within a 
, specifies the networks and 
s you want to monitor and the 
(including 
-enabled devices) or you want to use to monitor them, as well as any ports you want 
to exclude from monitoring. Each rule also specifies whether you want to discover 
s, 
s on the monitored networks.
disposition
See 
.