Cisco Cisco Firepower Management Center 4000
Glossary
GL-19
FireSIGHT System User Guide
derived fingerprint
An operating system
created by the system from all passively collected fingerprints for a
by applying a formula which calculates the most likely identity, using the confidence value of each
collected fingerprint and the amount of corroborating fingerprint data between identities.
collected fingerprint and the amount of corroborating fingerprint data between identities.
device
available in a range of throughputs. Depending on the licensed
capabilities you enable on your devices, you can use them to passively monitor traffic to build a
comprehensive map of your network assets,
comprehensive map of your network assets,
traffic, and
, perform
, and configure switching and routing. You must
manage devices with a
device clustering
See
device stacking
See
.
discovery
A component of the FireSIGHT System that uses managed
s to monitor your network and provide
you with a complete, persistent view of your network. Network discovery determines the number and
types of
types of
s (including
s) on your network, as well as information
about the operating systems, active
s, and open ports on those hosts. You can also configure
Cisco managed devices to monitor
of policy breaches, attacks, or network vulnerabilities.
discovery data
Host, user, and
information that qualifies your network assets and traffic flow, as gathered
by the
feature.
discovery event
that details the
of new assets or changes to existing assets. A
special kind of discovery event. Sometimes, Cisco uses the term “discovery event” as a general reference
to any
to any
information.
discovery policy
See
discovery rule
Within a
, specifies the networks and
s you want to monitor and the
s
-enabled devices) or you want to use to monitor them, as well as any ports you want
to exclude from monitoring. Each rule also specifies whether you want to discover
s,
s on the monitored networks.
disposition
See
.