Cisco Cisco Firepower Management Center 4000 Guía Del Desarrollador

Descargar
Página de 180
C H A P T E R
 
1-9
FireSIGHT System Database Access Guide
 
1
Introduction
The FireSIGHT System® database access feature allows you to query intrusion, discovery, user activity, 
correlation, connection, vulnerability, and application and URL statistics database tables on a Cisco 
Defense Center, using a third-party client that supports JDBC SSL connections.
You can use an industry-standard reporting tool such as Crystal Reports, Actuate BIRT, or JasperSoft 
iReport to design and submit queries. Or, you can configure your own custom application to query Cisco 
data under program control. For example, you can build a servlet to report intrusion and discovery event 
data periodically or refresh an alert dashboard.
Note that you can connect to multiple Defense Centers with a single client, but you must configure 
access to each one individually.
When deciding which appliance or appliances to connect to, keep in mind that querying the database on 
a Cisco appliance reduces available appliance resources. You should carefully design your queries and 
submit them at times consistent with your organization’s priorities.
For more information, see the following sections:
  •
  •
  •
Major Changes for Database Access in Version 5.3.1
If you are upgrading your FireSIGHT System deployment from Version 5.3 to Version 5.3.1, please note 
the following changes, some of which may require you to update your queries.
Removed Content for Version 5.3.1
Removed references to tables deprecated in version 5.0 and earlier.
Modified Tables for Version 5.3.1
The table below lists changes to database access tables in Version 5.3.1.