Cisco Cisco FirePOWER Appliance 7020
![Cisco](https://files.manualsbrain.com/attachments/7380d0050044647c30f5c24bbbf5d0c0b6d9bb84/common/fit/150/50/faa183d287233c52228cfea3dbc2a127fe780f60564fcb0955d9c3d1cd23/brand_logo.png)
37-4
FireSIGHT System User Guide
Chapter 37 Using Host Profiles
Viewing Host Profiles
•
describes the information provided in the
VLAN Tag section of a host profile.
•
describes the information provided in the
User History section of a host profile.
•
describes the information provided in
the Attributes section of a host profile.
•
explains how to set the host criticality
attribute and how to add notes to a host profile.
•
, which provides information about creating
and using user-defined host attributes.
•
describes the information provided in
the Host Protocols section of a host profile.
•
describes the information
provided in the White List Violations section of a host profile.
•
describes the information
provided in the Most Recent Malware Detections section of a host profile.
•
, which describes the information
provided in the Vulnerabilities and Vulnerability Detail sections of a host profile.
Viewing Host Profiles
License:
FireSIGHT
You can access a host profile from any network map or from any event view that includes the IP
addresses of hosts on monitored networks. For example, the table view of discovery events includes a
link to the host profile next to every entry in the IP Address column. If you have any indication of
compromise (IOC) rules enabled, potentially compromised hosts appear with a different host profile
icon.
addresses of hosts on monitored networks. For example, the table view of discovery events includes a
link to the host profile next to every entry in the IP Address column. If you have any indication of
compromise (IOC) rules enabled, potentially compromised hosts appear with a different host profile
icon.
To view a host profile from an event view:
Access:
Admin/Any Security Analyst
Step 1
On any event view, click the host profile icon (
) or the compromised host icon (
) next to the IP
address of the host whose profile you want to view.
The host profile appears in a pop-up window.
To view a host profile from a network map:
Access:
Admin/Any Security Analyst
Step 1
On any network map, drill down to the IP address of the host whose profile you want to view.
The host profile appears. See
for an example of how
to access a host profile from a network map.