Cisco Cisco Firepower Management Center 4000
37-4
FireSIGHT System User Guide
Chapter 37 Using Host Profiles
Viewing Host Profiles
•
describes the information provided in the
VLAN Tag section of a host profile.
•
describes the information provided in the
User History section of a host profile.
•
describes the information provided in
the Attributes section of a host profile.
•
explains how to set the host criticality
attribute and how to add notes to a host profile.
•
, which provides information about creating
and using user-defined host attributes.
•
describes the information provided in
the Host Protocols section of a host profile.
•
describes the information
provided in the White List Violations section of a host profile.
•
describes the information
provided in the Most Recent Malware Detections section of a host profile.
•
, which describes the information
provided in the Vulnerabilities and Vulnerability Detail sections of a host profile.
Viewing Host Profiles
License:
FireSIGHT
You can access a host profile from any network map or from any event view that includes the IP
addresses of hosts on monitored networks. For example, the table view of discovery events includes a
link to the host profile next to every entry in the IP Address column. If you have any indication of
compromise (IOC) rules enabled, potentially compromised hosts appear with a different host profile
icon.
addresses of hosts on monitored networks. For example, the table view of discovery events includes a
link to the host profile next to every entry in the IP Address column. If you have any indication of
compromise (IOC) rules enabled, potentially compromised hosts appear with a different host profile
icon.
To view a host profile from an event view:
Access:
Admin/Any Security Analyst
Step 1
On any event view, click the host profile icon (
) or the compromised host icon (
) next to the IP
address of the host whose profile you want to view.
The host profile appears in a pop-up window.
To view a host profile from a network map:
Access:
Admin/Any Security Analyst
Step 1
On any network map, drill down to the IP address of the host whose profile you want to view.
The host profile appears. See
for an example of how
to access a host profile from a network map.