Cisco CS-MARS-20-K9 - Security MARS 20, Руководство пользователя

Страница: 471 / 588

23-3
User Guide for Cisco Security MARS Local Controller
78-17020-01
Chapter 23 Management Tab Overview
IP Management
Add a Group
Step 1 Click Add .
Step 2
In the Name field, enter a name for the group.
Step 3 In the Available field, click each group that you want to add to highlight it. Click it again to de-highlight
it.
Step 4
Click Add .
Step 5 Click Submit .
IP Management
The IP Management page, accessed by clicking Management > IP Management , enables the definition
of network assets that you use as building blocks for inspection rules, drop rules, reports and queries,
topology discovery schedules, and in defining reporting devices and mitigation devices. You can define
assets as networks, IP ranges, or hosts. You can also defined named variables for use within inspection
rules.
The vulnerability assessment information that you define for a host, specifically the operating system
type and patch level and the known services that run on the host, assists MARS in determining false
positives.
Tip You can filter the list of objects displayed by the View list box. This selection allows you to filter to
hosts, networks, IP ranges, or variables.
Note
A Global Controller pushes any global IP Management Groups to the active Local Controllers that it
manages.
Search for an Address, Network, Variable, or Host
Step 1 Enter the text that you want to search for in the Search field.
Step 2
Click Search .
Filter by Groups
From the Select Group list, select the group.