Cisco Cisco Firepower Management Center 4000
13-32
FireSIGHT System User Guide
Chapter 13 Using Access Control Policies
Managing Access Control Policies
The system generates the report. Depending on your browser settings, the report may appear in a pop-up
window, or you may be prompted to save the report to your computer.
window, or you may be prompted to save the report to your computer.
Comparing Two Access Control Policies
License:
Any
To review policy changes for compliance with your organization’s standards or to optimize system
performance, you can examine the differences between two access control policies. You can compare
any two policies or the currently applied policy with another policy. Optionally, after you compare, you
can then generate a PDF report to record the differences between the two policies.
performance, you can examine the differences between two access control policies. You can compare
any two policies or the currently applied policy with another policy. Optionally, after you compare, you
can then generate a PDF report to record the differences between the two policies.
There are two tools you can use to compare policies:
•
The comparison view displays only the differences between two policies in a side-by-side format.
The name of each policy appears in the title bar on the left and right sides of the comparison view
except when you select
The name of each policy appears in the title bar on the left and right sides of the comparison view
except when you select
Running Configuration
, in which case a blank bar represents the currently active
policy.
You can use this to view and navigate both policies on the web interface, with their differences
highlighted.
highlighted.
•
The comparison report creates a record of only the differences between two policies in a format
similar to the policy report, but in PDF format.
similar to the policy report, but in PDF format.
You can use this to save, copy, print, and share your policy comparisons for further examination.
For more information on understanding and using the policy comparison tools, see:
•
•
Using the Access Control Policy Comparison View
License:
Any
The comparison view displays both policies in a side-by-side format, with each policy identified by
name in the title bar on the left and right sides of the comparison view. When comparing two policies
other than the running configuration, the time of last modification and the last user to modify are
displayed with the policy name.
name in the title bar on the left and right sides of the comparison view. When comparing two policies
other than the running configuration, the time of last modification and the last user to modify are
displayed with the policy name.
Differences between the two policies are highlighted:
•
Blue indicates that the highlighted setting is different in the two policies, and the difference is noted
in red text.
in red text.
•
Green indicates that the highlighted setting appears in one policy but not the other.
You can perform any of the actions in the following table.