Securing Networks with Cisco Firepower: Creating Report Templates

Limiting Results to Activity of a Specific Subnet

Question

When creating a report template, how are the results limited to show only the activity of a specific subnet?

Answers

Explanations

Click on the arrows to vote for the correct answer

A. B. C. D.

B.

https://www.cisco.com/c/en/us/td/docs/security/firesight/541/user-guide/FireSIGHT-System-UserGuide-v5401/Reports.html#87267

When creating a report template in Cisco FMC, you may want to limit the results to show only the activity of a specific subnet. Here are the detailed explanations of each answer choice:

A. Create a custom search in Cisco FMC and select it in each section of the report.

This answer choice suggests creating a custom search in Cisco FMC and then selecting it in each section of the report. To create a custom search, you can navigate to the "Search" tab in Cisco FMC and use the available filters to refine your search criteria. Once you have defined your search, you can save it as a custom search for future use. However, selecting this custom search in each section of the report may not necessarily limit the results to a specific subnet.

B. Add an Input Parameter in the Advanced Settings of the report, and set the type to Network/IP.

This answer choice suggests adding an Input Parameter in the Advanced Settings of the report and setting the type to Network/IP. This would allow the user to input a specific subnet or IP address while running the report. This option would effectively limit the report's results to the specified subnet or IP address.

C. Add a Table View section to the report with the Search field defined as the network in CIDR format.

This answer choice suggests adding a Table View section to the report and defining the Search field as the network in CIDR format. CIDR stands for Classless Inter-Domain Routing, and it is a method of allocating IP addresses and routing Internet Protocol packets. By defining the Search field as the network in CIDR format, you can effectively limit the report's results to the specified subnet.

D. Select IP Address as the X-Axis in each section of the report.

This answer choice suggests selecting IP Address as the X-Axis in each section of the report. This option would not necessarily limit the report's results to a specific subnet but would instead display the results based on IP addresses.

Overall, option B (Add an Input Parameter in the Advanced Settings of the report, and set the type to Network/IP) is the most appropriate choice to limit the report's results to a specific subnet.