Cisco SourceFire

Version: Cisco SourceFire 6.0.0

Sourcefire, Inc develops network security hardware and software. The company's FirePOWER network security appliances are based on Snort, an open-source Intrusion Detection System (IDS).

Netsurion data source integration for Cisco SourceFire allows you to monitor the following components:-

  • Operations - Correlation events.
  • Security - IDS and IPS activity.
  • Compliance - Inbound and outbound traffic. 

Once Cisco Sourcefire is configured to deliver events to Netsurion Manager; alerts, dashboards and reports can be configured into Netsurion.

Some of the Data Source Integrations available in Netsurion are listed below. 

Alerts

Type Name Description
Security Cisco SourceFire - High priority alert generated This alert is generated when alert priority is highest for the detected alert type.

Reports

Type Name Description
Security Cisco SourceFire - IDS and IPS activity This report provides the information related to IDS and IPS activity which include columns Event Time, Device Name, Priority Value, Protocol Type, Alert Impact, Alert Type, Alert Name, Source Address, Source Port, Source Location, Destination Address, Destination Port, Destination Location
Operations Cisco SourceFire - Correlation Events This report provides information related to Correlation events which include columns Event Time, Device Name, Source Address, Source Port, Destination Address, Destination Port, Protocol Type, Correlation Detail, Alert Name, Alert Type and Alert Impact.
Compliance Cisco SourceFire - Inbound and outbound traffic This report provides the information related to inbound and outbound traffic which include columns Event Time, Device Name,User Name, Connection Type, Source Address, Source Port, Destination Address, Destination Port, Application Protocol, Interface Ingress, Interface Egress, Rule Name, Action,URL Name, URL Category and URL Reputation.

Documentation:

The configuration details are consistent with Netsurion version 7.X and later,Cisco SourceFire 6.0.0

Download Integration Guide for more information and to configuration instructions.

This site uses cookies to store information on your computer. Some are essential to make our site work; others help us improve the user experience. By using the site, you consent to the placement of these cookies. Read our Privacy Statement to learn more.

I Accept