Cisco Systems CL-28826-01 Security Camera User Manual


  Open as PDF
of 2616
 
3-24
User Guide for Cisco Security Manager 4.4
OL-28826-01
Chapter 3 Managing the Device Inventory
Adding Devices to the Device Inventory
Discover Device Settings
Discover The type of elements that should be discovered and added to the
inventory. You have these options:
Policies and Inventory—Discover policies, interfaces, and service
modules (if applicable). This is the default and recommended
option.
When policy discovery is initiated, the system analyzes the
configuration file, then imports the configured service and
platform policies. When inventory discovery is initiated, the
system analyzes the interfaces defined in the file and then imports
the interface list.
If you select this option, the checkboxes below are activated and
you can use them to control the types of policies that are
discovered.
Note During discovery, if you import an ACL that is inactive, it is
shown as disabled in Security Manager. If you deploy the same
ACL, it will be removed by Security Manager.
Inventory Only—Discovers interfaces and service modules (if
applicable).
No Discovery—All discovery is skipped. No policy, interface, or
service module information for the device is added to the device
inventory.
Platform Settings Whether to discover the platform settings, which are also called
platform-specific policy domains. Platform-specific policy domains
exist on firewall devices and Cisco IOS routers. These domains contain
policies that configure features that are specific to the selected
platform. For more information, see Service Policies vs.
Platform-Specific Policies, page 5-2.
Firewall Policies Whether to discover firewall policies, which are also called firewall
services. Firewall services include policies such as access rules,
inspection rules, AAA rules, web filter rules, and transparent rules. For
details see, Chapter 12, “Introduction to Firewall Services”
IPS Policies Whether to discover IPS policies such as signatures and virtual sensors.
For more information, see Overview of IPS Configuration, page 35-5 or
Overview of Cisco IOS IPS Configuration, page 44-3.
RA VPN Policies Whether to discover IPSec and SSL remote access VPN policies such
as IKE proposals and IPsec proposals. This option is disabled if the
device does not support remote access VPN configuration. For more
information, see Chapter 29, “Managing Remote Access VPNs: The
Basics”.
Table 3-5 New Device Wizard, Device Information Page When Adding Devices from
Configuration Files (Continued)
Element Description