Cisco Cisco Firepower Management Center 4000

Page of 1844
 
31-3
FireSIGHT System User Guide
 
Chapter 31      Configuring External Alerting for Intrusion Rules
  Using SNMP Responses
For information about configuring SNMP Alerting, see 
.
Configuring SNMP Responses
License: 
Protection
You can configure SNMP alerting in an intrusion policy. After you apply the policy as part of an access 
control policy, the system notifies you of any intrusion events it detects via SNMP trap. For more details 
on SNMP alerting, see 
To configure SNMP alerting options:
Access: 
Admin/Intrusion Admin
Step 1
Select 
Policies> Intrusion > Intrusion Policy.
The Intrusion Policy page appears.
Step 2
Click the edit icon (
) next to the policy you want to edit.
If you have unsaved changes in another policy, click 
OK
 to discard those changes and continue. See 
 for information on saving unsaved changes in another 
policy.
The Policy Information page appears.
Step 3
Click 
Advanced Settings
 in the navigation panel on the left.
The Advanced Settings page appears.
Step 4
You have two choices, depending on whether 
SNMP Alerting 
under External Responses is enabled:
  •
If the configuration is enabled, click 
Edit
.
  •
If the configuration is disabled, click 
Enabled
, then click 
Edit
.
The SNMP Alerting page appears.
A message at the bottom of the page identifies the intrusion policy layer that contains the configuration. 
See 
 for more information.
Step 5
Specify the trap type format that you want to use for IP addresses that appear in the alerts, 
as Binary
 or 
as String
.
Note
If your network management system correctly renders the INET_IPV4 address type, then you 
can use the 
as Binary
 option. Otherwise, use the 
as String
 option. For example, HP OpenView 
requires the 
as String
 option.
Private Password
The SNMP key for privacy. SNMP v3 uses the Data Encryption Standard 
(DES) block cipher to encrypt this password.
If you specify a private password, privacy is enabled. If you specify a 
private password, you must also specify an authentication password.
User Name
Your SNMP user name.
Table 31-2
SNMP v3 Options (continued)
Option
Description