Cisco Cisco Firepower Management Center 4000
40-8
FireSIGHT System User Guide
Chapter 40 Creating Traffic Profiles
Saving a Traffic Profile
You can also set up inactive periods in traffic profile. For example, consider a network infrastructure
where all the workstations are backed up at midnight every night. The backup takes about 30 minutes
and spikes the network traffic. In that case, you might want to set up a recurring inactive period for your
traffic profile to coincide with the scheduled backups. During inactive periods, the traffic profile collects
data (so you can see the traffic on the traffic profile graphs), but that data is not used when calculating
profile statistics. You can set up inactive periods to recur daily, weekly, or monthly. Inactive periods can
be as short as five minutes or as long as one hour. Traffic profile graphs plotted over time show inactive
periods as a shaded region.
where all the workstations are backed up at midnight every night. The backup takes about 30 minutes
and spikes the network traffic. In that case, you might want to set up a recurring inactive period for your
traffic profile to coincide with the scheduled backups. During inactive periods, the traffic profile collects
data (so you can see the traffic on the traffic profile graphs), but that data is not used when calculating
profile statistics. You can set up inactive periods to recur daily, weekly, or monthly. Inactive periods can
be as short as five minutes or as long as one hour. Traffic profile graphs plotted over time show inactive
periods as a shaded region.
Access:
Admin/Discovery Admin
Follow the directions in the following table to set profile options.
Saving a Traffic Profile
License:
FireSIGHT
Use the following procedure to save a traffic profile.
To save a traffic profile:
Access:
Admin/Discovery Admin
Step 1
You have two options:
•
To save the profile without activating it, click
Save
.
•
To save the profile and start collecting data immediately, click
Save & Activate
.
Activating and Deactivating Traffic Profiles
License:
FireSIGHT
When you want it to begin profiling the traffic on a monitored network segment, you must activate a
traffic profile.
traffic profile.
Table 40-3
Profile Options
To...
You can...
change the profiling time window
in the
Profiling Time Window
field, type the number of hours, days,
or weeks. Then choose
hour(s)
,
day(s)
, or
week(s)
from the
drop-down list.
change the sampling rate
select the rate from the
Sampling Rate
drop-down list.
add an inactive period
click
Add Inactive Period
. Then, using the drop-down lists, specify
when and how often you want the traffic profile to refrain from
collecting data.
collecting data.
delete an inactive period
click
Delete
next to the inactive period you want to delete.