Cisco Cisco Firepower Management Center 4000

A set of configurations for a 

. You can configure multiple instances per module, for 

example, you could respond to different correlation policy violations using the same module, but 
different instances that have different settings. When a remediation instance triggers, the resulting action 
is called a 

. 

A program that launches a 

, using sets of configurations called 

FireSIGHT System ships with several remediation modules that perform various actions; you can also 
use a flexible API to create your own modules.

An 

 generated when a 

 is launched.

A template that specifies the data constraints and formats for a report and its sections.

See 

.

See 

.

A reaction to a 

 violation — either an 

 or a 

.

A network-based 

 generated when the 

 for a previously detected file 

changes. When this occurs, the system also updates the dispositions for files and malware that share the 
retrospective event’s 

.

See 

An interface that routes traffic in a Layer 3 deployment. You can set up physical routed interfaces for 
handling untagged 

 traffic, and logical routed interfaces for handling traffic with designated 

VLAN tags. You can also add static Address Resolution Protocol (ARP) entries to routed interfaces.

A 

, located at a gateway, that forwards packets between networks. Using 

, the system can identify routers. In addition, you can configure managed 

s as 

s that route traffic between two or more interfaces.