Cisco Cisco Firepower Management Center 4000
38-44
FireSIGHT System User Guide
Chapter 38 Working with Discovery Events
Working with Application Details
Last Used
The time that the application was last used or the time that the application data was updated using
the host input feature. The Last Used value is updated at least as often as the update interval you
configured in the network discovery policy, as well as when the system detects an application
information update. For information on setting the update interval, see
the host input feature. The Last Used value is updated at least as often as the update interval you
configured in the network discovery policy, as well as when the system detects an application
information update. For information on setting the update interval, see
IP Address
The IP address associated with the host using the application.
Client
The name of the application. Note that if the system detected an application protocol but could not
detect a specific client,
detect a specific client,
client
is appended to the application protocol name to provide a generic
name.
Version
The version of the application.
Category, Tags, Risk, or Business Relevance for Clients
The categories, tags, risk level, and business relevance assigned to the client. These filters can be
used to focus on a specific set of data.
used to focus on a specific set of data.
For more information, see
.
Application Protocol
The application protocol used by the application. Note that if the system detected an application
protocol but could not detect a specific client,
protocol but could not detect a specific client,
client
is appended to the application protocol name
to provide a generic name.
Category, Tags, Risk, or Business Relevance for Application Protocols
The categories, tags, risk level, and business relevance assigned to the application protocol. These
filters can be used to focus on a specific set of data.
filters can be used to focus on a specific set of data.
For more information, see
.
Web Application
The web application based on the payload content or URL detected by the system in the http traffic.
Note that if the system detects an application protocol of
Note that if the system detects an application protocol of
HTTP
but cannot detect a specific web
application, the system supplies a generic web browsing designation here.
Category, Tags, Risk, or Business Relevance for Web Applications
The categories, tags, risk level, and business relevance assigned to the web application. These filters
can be used to focus on a specific set of data.
can be used to focus on a specific set of data.
For more information, see
.
Hits
The number of times the system detected the application in use. For applications added using the
host input feature, this value is always
host input feature, this value is always
0
.
Device
The device that generated the discovery event containing the application detail.