Cisco Cisco FirePOWER Appliance 8250
37-22
FireSIGHT System User Guide
Chapter 37 Using Host Profiles
Working with Host Protocols in the Host Profile
Step 2
Under
Attributes
, click the name of the host attribute to which you want to assign a value.
A pop-up window appears.
Step 3
Enter a value for the attribute or select a value from the drop-down list.
Step 4
Click
Save
.
The host attribute value is saved.
Working with Host Protocols in the Host Profile
License:
FireSIGHT
You can view the protocols running on a host through the host profile. If needed, you can also delete host
protocols for a particular host from the profile.
protocols for a particular host from the profile.
Each host profile contains information about the protocols detected in the network traffic associated with
the host.
the host.
Descriptions of the protocol and network layer information follow.
Protocol
The name of a protocol used by the host.
Layer
The network layer where the protocol runs (
Network
or
Transport
).
Note that if the host is running a protocol that violates a compliance white list in an activated correlation
policy, the Defense Center marks the non-compliant protocol with the white list violation icon (
policy, the Defense Center marks the non-compliant protocol with the white list violation icon (
).
You can delete a protocol from a host profile to remove protocols you know are not running on the host.
Note that deleting a protocol from a host may bring the host into compliance with a compliance white
list.
Note that deleting a protocol from a host may bring the host into compliance with a compliance white
list.
Note
If the system detects the protocol again, it re-adds it to the network map and the host profile.
To delete a protocol from a host profile:
Access:
Admin/Any Security Analyst
Step 1
In the
Protocols
section of the host profile, click the delete icon (
) next to the protocol you want to
delete.
The protocol is deleted for that host.
Working with White List Violations in the Host Profile
License:
FireSIGHT