Cisco Cisco FirePOWER Appliance 7010
37-12
FireSIGHT System User Guide
Chapter 37 Using Host Profiles
Working with Operating Systems in the Host Profile
Tip
Click the delete icon (
) next to any operating system identity to remove the identity from the
Operating System Identity Information pop-up window and, if applicable, to update the current identity
for the operating system in the host profile. Note that you cannot delete Cisco-detected operating system
identities.
for the operating system in the host profile. Note that you cannot delete Cisco-detected operating system
identities.
Editing an Operating System
License:
FireSIGHT
You can set the current operating system identity for a host using the FireSIGHT System web interface.
Setting the identity through the web interface overrides all other identity sources so that identity is used
for vulnerability assessment and impact correlation. However, note that if the system detects a
conflicting operating system identity for the host after you edit the operating system, an operating
system conflict occurs.
Setting the identity through the web interface overrides all other identity sources so that identity is used
for vulnerability assessment and impact correlation. However, note that if the system detects a
conflicting operating system identity for the host after you edit the operating system, an operating
system conflict occurs.
Both operating systems are then considered current until you resolve the conflict. For more information,
see
see
To change the operating system identity:
Access:
Admin/Any Security Analyst
Step 1
In a host profile, click
Edit
in the
Operating System
section.
A pop-up window appears where you can set the operating system identity.
Step 2
You have several options:
•
Select
Current Definition
from the
OS Definition
drop-down list to confirm the current operating system
identity through host input, then skip to step
.
•
Select a variation on the current operating system identity from the
OS Definition
drop-down list, then
skip to step
.
•
Select
User-Defined
from the
OS Definition
drop-down list, then continue with step
Step 3
Optionally, select
Use Custom Display String
and modify the custom strings you want to display in the
Vendor String
,
Product String
, and
Version String
fields.
Step 4
Optionally, to change to an operating system from a different vendor, select the vendor and other
operating system details from the
operating system details from the
Vendor
and
Product
drop-down lists.
Step 5
Optionally, to configure the operating system product release level, select the applicable items in the
Major
,
Minor
,
Revision
,
Build, Patch,
and
Extension
drop-down lists.
Step 6
Optionally, if you want to indicate that fixes for the operating system have been applied, click
Configure
Fixes
.
The list of available package fixes displays.
Step 7
Choose the applicable fixes in the drop-down list and click
Add
.
Step 8
Optionally, add the relevant patches and extensions using the
Patch
and
Extension
drop-down lists.
Step 9
Click
Finish
to complete the operating system identity configuration.