Cisco Cisco Firepower Management Center 2000
31-3
FireSIGHT System User Guide
Chapter 31 Configuring External Alerting for Intrusion Rules
Using SNMP Responses
For information about configuring SNMP Alerting, see
.
Configuring SNMP Responses
License:
Protection
You can configure SNMP alerting in an intrusion policy. After you apply the policy as part of an access
control policy, the system notifies you of any intrusion events it detects via SNMP trap. For more details
on SNMP alerting, see
control policy, the system notifies you of any intrusion events it detects via SNMP trap. For more details
on SNMP alerting, see
To configure SNMP alerting options:
Access:
Admin/Intrusion Admin
Step 1
Select
Policies> Intrusion > Intrusion Policy.
The Intrusion Policy page appears.
Step 2
Click the edit icon (
) next to the policy you want to edit.
If you have unsaved changes in another policy, click
OK
to discard those changes and continue. See
for information on saving unsaved changes in another
policy.
The Policy Information page appears.
Step 3
Click
Advanced Settings
in the navigation panel on the left.
The Advanced Settings page appears.
Step 4
You have two choices, depending on whether
SNMP Alerting
under External Responses is enabled:
•
If the configuration is enabled, click
Edit
.
•
If the configuration is disabled, click
Enabled
, then click
Edit
.
The SNMP Alerting page appears.
A message at the bottom of the page identifies the intrusion policy layer that contains the configuration.
See
See
for more information.
Step 5
Specify the trap type format that you want to use for IP addresses that appear in the alerts,
as Binary
or
as String
.
Note
If your network management system correctly renders the INET_IPV4 address type, then you
can use the
can use the
as Binary
option. Otherwise, use the
as String
option. For example, HP OpenView
requires the
as String
option.
Private Password
The SNMP key for privacy. SNMP v3 uses the Data Encryption Standard
(DES) block cipher to encrypt this password.
(DES) block cipher to encrypt this password.
If you specify a private password, privacy is enabled. If you specify a
private password, you must also specify an authentication password.
private password, you must also specify an authentication password.
User Name
Your SNMP user name.
Table 31-2
SNMP v3 Options (continued)
Option
Description