Cisco Cisco Firepower Management Center 4000

If you have unsaved changes in another policy, click 

 to discard those changes and continue. See 

 for information on saving unsaved changes in another 

policy.

The Policy Information page appears.

Click 

 in the navigation panel on the left.

The Advanced Settings page appears.

You have two choices, depending on whether 

 under Application Layer Preprocessors 

is enabled:

If the configuration is enabled, click 

.

If the configuration is disabled, click 

, then click 

.

The HTTP Configuration page appears.

You can modify any of the global options described in 

Optionally, click 

 at the top of the page to display rules associated 

with individual options.

Click 

 to return to the HTTP Configuration page.

Save your policy, continue editing, discard your changes, revert to the default configuration settings in 
the base policy, or exit while leaving your changes in the system cache. See the 

 table for more information.

Protection

You can set server-level options for each server you monitor, globally for all servers, or for a list of 
servers. Additionally, you can use a predefined server profile to set these options, or you can set them 
individually to meet the needs of your environment. Use these options, or one of the default profiles that 
set these options, to specify the HTTP server ports whose traffic you want to normalize, the amount of 
server response payload you want to normalize, and the types of encoding you want to normalize.

If no preprocessor rule is mentioned, the option is not associated with a preprocessor rule.

Use this option to specify the IP address of one or more servers.

Note that in addition to a limit of up to 255 total profiles, including the default profile, you can 
include up to 496 characters, or approximately 26 entries, in an HTTP server list, and specify a total 
of 256 address entries for all server profiles. For information on using IPv4 CIDR notation and IPv6 
prefix lengths in the FireSIGHT System, see 

.

Note that the 

default

 setting in the default policy specifies all IP addresses on your monitored 

network segment that are not covered by another target-based policy. Therefore, you cannot and do 
not need to specify an IP address or CIDR block/prefix length for the default policy, and you cannot 
leave this setting blank in another policy or use address notation to represent 

any

 (for example, 

0.0.0.0/0 or ::/0).