Cisco Cisco FirePOWER Appliance 8130
37-18
FireSIGHT System User Guide
Chapter 37 Using Host Profiles
Working with Applications in the Host Profile
Step 7
If you want to indicate that fixes for the server have been applied, click
Configure Fixes
. Otherwise, skip
to step
The Available Package Fixes page appears.
Step 8
Add the patches you want to apply for that server to the fixes list.
Step 9
Click
Finish
to complete the server identity configuration.
Resolving Server Identity Conflicts
License:
FireSIGHT
A server identity conflict occurs when an active source, such as an application or scanner, adds identity
data for a server to a host, then the system detects traffic for that port that indicates a conflicting server
identity.
data for a server to a host, then the system detects traffic for that port that indicates a conflicting server
identity.
To resolve a server identity conflict:
Access:
Admin/Any Security Analyst
Step 1
Click the resolve icon next to the server in the
Servers
list.
The Server Identity pop-up window appears.
Step 2
Select the type of server from the
Select Server Type
drop-down list.
Step 3
Optionally, to only list vendors and products for that server type, select the
Restrict by Server Type
check
box.
Step 4
Optionally, to customize the name and version of the server, select the
Use Custom Display String
and type
a
Vendor String
and
Version String
.
Step 5
In the
Product Mappings
section, select the operating system, product, and versions you want to use.
For example, if you want the server to map to Red Hat Linux 9, select
Redhat, Inc.
as the vendor,
Redhat
Linux
as the product, and
9
as the version.
Step 6
If you want to indicate that fixes for the server have been applied, click
Configure Fixes
. Otherwise, skip
to step
The Available Package Fixes page appears.
Step 7
Add the patches you want to apply for that server to the fixes list.
Step 8
Click
Finish
to complete the server identity configuration and return to the host profile.
Working with Applications in the Host Profile
License:
FireSIGHT
You can see the applications running on a host in the host profile. If you want to remove an application
from a host profile, you can delete that application.
from a host profile, you can delete that application.
For more information on managing applications in the host profile, see:
•