How to get a Connection Matrix out of the FireSight?

Hi All,
did someone have a useful hint how i can get a usefull connection matrix out of the FireSight Management to create a Ruleset for the ASA, which is at the moment on pemit any .... Focus should be a list of source and destination IP with port and maybe a counter - did some investigation on the connection events - but it is too much information and too much same events - and i have only events from the last 2 days ... i would like to get the result maybe from one or two weeks - is there a way to do this?
Thank You in advance
Helmut

You can generate reports based on connection events and connection workflows.  You could create a custom workflow with something like Initiator IP, Responder, IP, dst port, count.  That would give you the count of connections between a src/dst IP on a given dst port.  
As for connection history that's a tough one depending on the amount of traffic going through your device.  The default connection limit is 1M connections.  You can raise that in the System Policy database setting but be careful as bumping this up too high can cause it to take a long time to process connection event queries.  A week is really all we can ever hope for and even that is often too long (too many connections).

Similar Messages

  • How to get an session BackingBean out of the FacesContext

    Hi,
    I want to make my appliction userdependent (each user only see's his own data).
    There fore I created a UserBackingBean with a session scope.
    An attribute of my other backingbeans is the User object. In my UserBackingBean I want to create a static method that returns the current user. Only I don't know how to get the UserBackingBean from a FacesContext.
    Please help?
    Romano

    ... and if you decide there MAY be several users logged in simultaneously, you can get the user associated with the current session by doing :
    FacesContext facesContext = FacesContext.getCurrentInstance();
    ExternalContext externalContext = facesContext.getExternalContext();
    Map sessionMap = externalContext.getSessionMap();
    UserBackingBean userBackingBean = (UserBackingBean)sessionMap.get("userBackingBean");assuming you labeled your UserBackingBean managed bean "userBackingBean" in your faces-config.xml

  • I bought an iphone of my friend and used my blackberry sim in it, it say i have signal on 3g but imessage and twitter does not work when not connected to wifi, and i dont know how to get it to work out of the house?

    The phone is not stolen but it does not work out side of the house

    if it doesnt match that means your iPhone is not provisioned for the carrier you are trying to use. Your iPhone would need to be unlocked in order to use on other carriers. You will need to contact your carrier to see if this iPhone is unlocked py providing them the IMEI. If the iPhone is not unlocked you will need to contact the carrier that the iPhone is locked to to see if they will unlock the device to use on another carrier.

  • How to get a mini disc out of the drive?

    Hi all. I have just made the stupid mistake of putting a mini disc inside my G4 and i cant get it out by ejecting. It is not even detected by the system. People have recomended restarting the system and holding down the mouse button, but that did not help. Others have recomended sliding a business card into the slot, however I'm reluctant to try that due to fear of damaging my system. Is there any safe way to professionally remove this disc? Any help is much appreciated.

    The absolute safe pro way is to pull the drive and open the top. Sorry a pain I know.
    There are other ways, some more dangerous than others
    http://forums.macrumors.com/archive/index.php/t-200014.html
    Richard

  • HOW TO GET A REVERSED RECEIPT OUT OF THE AVAILABLE FOR RECONCILIATION

    Hi All,
    We have reversed 3 receipts in Ar as it gave error while posting. Now we are getting these entries in Bank reconciliation report.
    Please suggest.
    Thanks in Advance,
    Ajit

    Hello Ajit,
    Remember there are different types of Receipt Reversal. The two you're probably interested in are:
    Reverse Payment; and
    Non-sufficient Funds
    You would use 'Non-sufficient Funds' in situations where both a credit and debit appear on the bank statement - e.g. A customer cheque that bouces due to insufficient funds. This will be available for reconciliation to a bank statement debit item.
    You would use 'Reverse Payment' when the original receipt was entered in error. This will not be available for reconciliation to a bank statement debit item.
    If you have reconciled a credit to a receipt which you later realise was entered in error it is important that you unreconcile the credit before reversing the receipt with 'Reverse Payment' (as the money has been incorrectly reconciled - and you'll be left with an accounting headache if you don't).
    Regards,
    - Matt Symes
    inKlein Consulting Ltd

  • How to get this report format out ?

    Hello all experts,
    Sample table creations like the following. Note checkno under xcheck table is not unique. Have tried pivotting the xcheck table then link pivoted xcechk with xcert using certno and invno but this willl end up getting duplicate records. Can u please help ? Basically I am stuck at how to get that vendor name out on the report
    create table xcert(
    certseq number primary key,
    certno varchar2(5) not null,
    vendor varchar2(25));
    create table xcheck(
    checkseq number primary key,
    checkno varchar2(8) not null,
    invno varchar2(100);
    Xcert Data
    certseq certno     vendor
    1     C1001     BP GAS
    2     C1002     BUG PEST CONTROL
    3     C1003     BP GAS
    4     C1004     BP GAS
    5     C1005     WILLIES BESTxcheck Data
    checkseq     checkno          invno
    1          EF500001     C1001,C1003,C1004
    2          EF500002     C1002
    3          EF500002     C1005Looking for a following report format
    checkno          invno               vendor
    EF500001     C1001,C1003,C1004     BP GAS
    EF500002     C1002               BUG PEST CONTROL
    EF500002     C1005               WILLIES BEST      Thank you
    Munshar

    Hi, Munshar,
    MunSharmi wrote:
    Frank,
    "I don't see why you would need another column. What would you need to store, or retrieve, that a table like this wouldn't allow?
    Notice my orignal xcheck table data plus a check date column
    {code}
    checkseq     checkno          invno               checkdate
    1          EF500001     C1001,C1003,C1004     11/01/2010
    2          EF500002     C1002               12/10/2010          
    3          EF500002     C1005               01/01/2011
    {code}Sure, if you have other data that you haven't mentioned yet, then you need other columns, and maybe even other tables, to store that data.
    Talking about this would be a lot easier if you described what you were trying to model in these tables, and what the different entities are.
    after nomalization
    {code}
    seq(PK)     checkseq     checkno          invno               checkdate
    1     1          EF500001     C1001               11/01/2010
    2     1          EF500001     C1003               11/01/2010
    3     1          EF500001     C1004               11/01/2010
    4     2          EF500002     C1002               12/10/2010          
    5     3          EF500002     C1005               01/01/2011
    {code}What do checkseq and checkdate represent? What is the realtionship between them? If there is another row with checkseq=3, will it necessarily have checkdate=01/01/2011? If there is another row with checkdate=01/01/2011, will it necessarily have checkseq=3?
    Shouldn't I need to have the extra seq(PK), then use check seq to group the data report to meet users' target format ? Please adviseIt depends on what your entities are. If you explain that, then perhaps I can give some advice about how to model them.
    In general, every type of entity requires a separate table. It looks like xcert represents one kind of entity, uniquely identified by certno. I assume there is some other kind of entity, uniquely identified by checkno, and that you have a table for that which you haven't needed to show in this thread.
    Are you saying that there's some other entity, that is uniquely identified by checkseq? If so, it probably needs a table of it's own.
    Every table should have a primary key. I had assumed that checkseq only served as the primary key of the xcheck table. If it serves some other purpose, then yes, you would need another column.
    Many-to-many relationships usually require a separate table. I was guessing that xcheck was intended to record a many-to-many realtionship between xcert and some other table. Guessing is not always the best way to solve problems. I think it would be better if you explained what you want to do, rather than have me guess at it.
    So far, what you've shown is analagous to an order entry system. One kind of entity is customer, another is supplier. Say you're running a company that sells products from many suppliers to many customers. There is a many-to-many relationship between customers and suppliers. Any customer may buy from many suppliers; any supllier may sell to many cutomers. You may have an orders table that keeps track of that many-to-many relationship. You may also have another entity, salesman, that also has many-to-many relationships with customers and suppliers. Depending on what exactly you consider an "order", there are lots of different ways to model this. Can a single order involve many customers? Can a single order involve many suppliers? Can a single order involve many salesmen? If an order always involves one customer buying from one supplier using one salesman, then you may only need four tables. If the situation is more complicated, then you may need more tables.

  • I get a connection timed out error when trying to connect to the itunes store, if I have pending downloads they show up and I can download, also I was able to access my account, yet I can't access other parts of the store, I am in greece on a macbook pro

    I am from the states and am in Greece on vacation.  I have a good wifi connection yet keep getting a connection timed out error when I try to access the itunes store.  It is funny because pending downloads show up in the cue, and they download no problem.  I can also open my account.  When I try to go the the movies or music section of the stor though it just times out.  I tried updating to the latest itunes software and restarting, also I checked all the proxy boxes in the network section of the settings then unchecked them all and restarted and it keeps doing the same thing.  Any help would be appreciated.
    Thanks

    Welcome to AD!
    There's been plenty of posts about Norton & the removal tool here. Unfortunately many folks seem to not even know it comes pre-installed on most PCs! Even a trial version, never used or long since expired can cause problems - and not just with iTunes.
    Anyone with a Dell, HP, Gateway EEE PC, Asus ..... what Windows PC manufacturer does NOT have this junk software pre-installed?
    Almost all of them have made deals with Symantec to pre-install it.
    Horrible, horrible software.
    Anyway, glad you finally solved your problem.

  • How can I get a stripped screw out of the bottom of my iPhone?? I need help, How can I get a stripped screw out of the bottom of my iPhone?? I need help

    How can I get a stripped screw out of the bottom of my iPhone?? I need help, How can I get a stripped screw out of the bottom of my iPhone?? I need help

    Try asking at ifixit.com. The iPhone is not considered user servicable. You're not going to get much help on an Apple sponsored forum.

  • How to get database connection in applet

    Hi,
    I am trying to prepare database connection in applet. After preparing connection with database it'll read same values from table.
    At the time of development it works fine. I have used esclipse IDE for coding and testing.
    But when I try to call that applet from browser. It is giving ClassNotFound exception.
    Does anybody know How to get database connection in applet ?
    Please help me if anybody know solution for this.
    Thanks,
    Rajesh

    As per my knowledge is conserned
    1 u can get the database connection in a jsp page and u send the result set as param to the applet and u can use retrieved values as if they were of the same applet if u r interested i can send the db connetion coding for jsp my id [email protected]

  • How do I get  camera memory card out of the DVD slot?

    How do I get  camera memory card out of the DVD slot?

    Well, for one thing it shouldn't be in the DVD slot. You can try turning the computer on it's side and see if you can coax it out, but otherwise you will need to take it in for service because the computer has to be disassembled.

  • How i get data in matrix grid from A/P Invoice

    How i get data in matrix grid from A/P Invoice before click add button

    Hi,
    Are you trying to read the data in the matrix of a system form? Then you only have to look for the matrix with the ID you can see by visualising the System Information in B1 and then directly read from the matrix cells (using columns element in matrix), the DBDataSources are not filled in until the document has been added to the database.
    There are many messages in this forum talking about how to read information in matrix item, just make a search for it.
    Hope it helps
    Trinidad.

  • How do I get my sd card out of the cd slot.. I have tried the method shown on youtube and it is not working

    How do i get my sd card out of the cd slot.. I have tried the method shown on youtube and it's not working

    Shut down the machine, turn it on it's side and shake it out. If you still can't get it try another solution on YouTube, there are many shown. We Have no idea which one you tried. If you still can't get it out take the machien into your local Apple Store or AASP and they will help you.

  • Hey there! well i from india and i m facing problem connecting my debit card to the itune store ,as the very option is not there, can someone guide me how to get it connected , i have a mastercard debit card with me .please help me

    hey there! well i from india and i m facing problem connecting my debit card to the itune store ,as the very option is not there, can someone guide me how to get it connected , i have a mastercard debit card with me .please help me

    if you are signed in to iTunes with your AppleID, click on the AppleID > view account > payment information > enter in your information

  • Could anyone please tell me how to get my cd/disc out. thanks

    could anyone please tell me how to get my disc/cd out of my desk top? thanks

    CD/DVD - Eject Stuck
    CD/DVD - Eject Stuck (2)
    CD/DVD - Eject Stuck (3)
    CD/DVD - Eject Stuck (4)
    CD/DVD - Eject Stuck (5)

  • I cant dowload 4.3.3. i get a connection timed out error message

    i cant dowload 4.3.3. i get a connection timed out error message

    If you are getting a network timeout error when downloading an iOS update then try temporarily turning off all your firewall and antivirus software until the download has completed.
    In terms of whether an update is coming, we are just fellow users on here so we won't know when the next update might be, and what might or might not be in it.

Maybe you are looking for

  • How do I get my iphone 4s out of recovery mode if it wont restore?

    My iphone won't let me get out of recovery mode & tells me to plug into itunes & restore it, but everytime I do that, it tells me my Iphone cannot be found.

  • Can I buy a new power cable?

    My MacBook power cable is falling appart; the plastic is wearing away and it will only charge when it's positioned in certain ways. I was wondering if there was anyway I could buy a new power cable for my MacBook and how much it would cost. I would r

  • Digital Photo Frame with iPhoto

    What are the best digital photo frames that are compatible with Mac and iPhoto?  

  • Photoshop Elements 6 will install but not open

    I have tried to install Photoshop Elements 6 several times.  After what appears to be a successful install, the program will not open.  When I go to log off my computer I get a message that Photoshop Elements is still running and my computer is unabl

  • Computer does not reliable reboot

    In the last few days my iMAC G5 does not shut down or restart without holding down the button in the back. Some of the programs like system preferences will quite responding. All these problems started suddenly. Should I restore the system with time