Cisco Cisco Firepower Management Center 4000
Glossary
GL-26
FireSIGHT System User Guide
host profile
Collected information about a specific detected
. This includes general
information, such as its
name and operating system, as well as the protocols and
s running on the host. The host
profile may also include
information, applicable
s, detected vulnerabilities, and scan results for that host.
host profile qualification
A constraint placed on a
or
. A host profile qualification within a
correlation rule specifies that the
should generate a
only if the
involved meets certain criteria. A host profile qualification within a traffic profile limits the hosts that
are profiled.
are profiled.
host view
The final page in
s that display
s or network assets. The host view displays the
s involved in the events or assets you are viewing.
HTTP response page
. You can display a generic Cisco-provided response page, or you can provide custom
HTML. If the request was blocked by an
rule, you can allow users to click a button on
the response page to continue to the originally requested site.
hybrid interface
on a managed
that allows the system to bridge traffic between a
and a
.
identity conflict
The conflict that occurs when the system reports a new passive operating system or
identity that
conflicts with the current active identity and previously reported passive identities.
impact
s, a numbered indicator of the correlation between
data,
, and
information. Impact level 1 (red impact icon) means that the targeted
is vulnerable to
the attack represented by the intrusion event, impact level 2 (orange impact icon) means it is potentially
vulnerable, and so on. Attacks directed at hosts on networks not monitored by the
vulnerable, and so on. Attacks directed at hosts on networks not monitored by the
are impact level 0 (gray impact icon), which indicates that the
cannot determine
the events’ impact.
import
A method that you can use to transfer various configurations from
to appliance. You can
ed from another appliance of the same type.
inactive period
An interval during which a
does not trigger. You can configure the time, frequency, and
duration of inactive periods. See also
.