Cisco Cisco Firepower Management Center 2000

Página de 1844
 
50-17
FireSIGHT System User Guide
 
Chapter 50      Managing System Policies
  Configuring a System Policy
Note
DNS resolution caching is a system-wide setting that allows the caching of previously resolved 
DNS lookups. To configure IP address resolution on a per-user-account basis, users must also 
select 
Event View Settings
 from the 
User Preferences
 menu, enable 
Resolve IP Addresses
, and then 
click 
Save
. For information about configuring DNS servers, see 
. For information about configuring event view preferences, see 
Step 5
In the 
DNS Cache Timeout (in minutes)
 field, enter the number of minutes a DNS entry remains cached in 
memory before it is removed for inactivity. 
The default setting is 300 minutes (five hours).
Step 6
Click 
Save Policy and Exit
.
The system policy is updated. Your changes do not take effect until you apply the system policy. See 
 for more information.
Caution
Although DNS caching is enabled for the appliance, IP address resolution is not enabled on a per-user 
basis unless it is configured on the Events page accessed from the User Preferences menu.
Configuring a Mail Relay Host and Notification Address
License: 
Any
You must configure a mail host if you plan to:
  •
email event-based reports
  •
email status reports for scheduled tasks
  •
email change reconciliation reports
  •
email data pruning notifications
  •
use email for discovery event, impact flag, and correlation event alerting
  •
use email for intrusion event alerting
  •
use email for health event alerting
You can select an encryption method for the communication between appliance and mail relay host, and 
can supply authentication credentials for the mail server if needed. After configuring settings, you can 
test the connection between the appliance and the mail server using the supplied settings.
To configure a mail relay host:
Access: 
Admin
Step 1
Select 
System > Local > System Policy
.
The System Policy page appears.
Step 2
You have the following options:
  •
To modify the email settings in an existing system policy, click the edit icon (
) next to the system 
policy.