Cisco Cisco FirePOWER Appliance 7020
38-5
FireSIGHT System User Guide
Chapter 38 Working with Discovery Events
Viewing Discovery Performance Graphs
Step 1
Click the name of the application protocol you want to view.
The first page of the default servers workflow appears, constrained by the application protocol you
picked. To use a different workflow, including a custom workflow, click
picked. To use a different workflow, including a custom workflow, click
(switch workflow)
by the
workflow title. For information on specifying a different default workflow, see
For information on working with servers, see
.
OS Breakdown
License:
FireSIGHT
The OS Breakdown section lists the operating systems currently running on the monitored network,
along with their vendors and the total number of hosts running each operating system.
along with their vendors and the total number of hosts running each operating system.
A value of
unknown
for the operating system name or version means that the operating system or its
version does not match any of the system’s fingerprints. A value of
pending
means that the system has
not yet gathered enough information to identify the operating system or its version.
You can use the OS Breakdown section to view details on the detected operating systems.
To view hosts by operating system or vendor:
Access:
Admin/Any Security Analyst
Step 1
You have two options:
•
To view all hosts running a specific operating system, under
OS Name
, click the operating system
name.
•
To view all hosts running any operating system from a specific vendor, under
OS Vendor
, click the
vendor name.
The first page of the default hosts workflow appears, constrained by the operating system or vendor you
picked. To use a different workflow, including a custom workflow, click
picked. To use a different workflow, including a custom workflow, click
(switch workflow)
by the
workflow title. For information on specifying a different default workflow, see
For information on working with hosts, see
.
Viewing Discovery Performance Graphs
License:
FireSIGHT
You can generate graphs that display performance statistics for managed devices with discovery events.
Note
New data is accumulated for statistics graphs every five minutes. Therefore, if you reload a graph
quickly, the data may not change until the next five-minute increment occurs.
quickly, the data may not change until the next five-minute increment occurs.
Descriptions of the available graph types follow.