Cisco Cisco Firepower Management Center 4000

Whether an 

 is an 

The action you take to have a 

, or changes to that policy, take effect. You apply most policies from 

the 

 to its managed 

s; however, you activate and deactivate 

 policies 

because they do not involve changes to the configuration of managed devices.

The short name for 

An 

 that describes a specific FireSIGHT System user interaction with the web interface. Each audit 

event contains a time stamp, the user name of the user whose action generated the event, a source IP 
address, and text describing the event. Audit events are recorded in the 

.

A record of user interactions with the web interface. The audit log comprises 

s.

A collection of settings that allows you to connect to an external authentication server for one of two 
reasons. One type of authentication object enables 

 (RADIUS or LDAP) to the 

FireSIGHT System’s web interface. Another type specifies the LDAP users and groups you can use in 

s, and allows you to retrieve metadata for certain users whose activity was detected in 

network traffic or by the 

.

An advanced 

 setting that limits the time allowed to process packets through an interface and 

allows packets to bypass processing if the time is exceeded. Cisco recommends use of this feature for 

s in non-production environments.

See 

.

A selectable set of configurations that may be any default 

 provided by Cisco, or a 

custom policy.

A 

 in an 

 comprised of default settings. The 

 selected for the 

intrusion policy determines the settings in the base policy layer.

See 

.