firesight Issue

[chawkideeb]

Hello ,

I need your help with the below.

I have asa 5525-X with version 9.6(2) And firepower and firesight 6.1.0.1 + VDB 279

1. I activate nmap but for the whole subnet 172.0.0.0/8,and the day after I got the attached error (image 1 / image 2 / image 3)           

         I know that the firepower detected more then 50000 host for this reason I got the above.

         Now I disable the nmap.how can I reset the module since it is marking right now red alert.i want to be below 50000.

2- I want to do application filter.

     i am able to see all the application.Find attached the image 4 and image 5. I have installed VDB 279.

    In the above picture I can not see the anonymizer and proxy application.while in URL I can see it.

    But if I want to sarch by category I can not .it returns 0.Thank you in advance for your response.

Best Regards,

Chawki Dib

[Marvin Rhoads · Accepted solution]

You can purge the discovered hosts as described here:

http://www.cisco.com/c/en/us/td/docs/security/firepower/60/configuration/guide/fpmc-config-guide-v60/fpmc-config-guide-v60_chapter_01011101.html

Also make sure you have properly setup your network discovery policy to only include subsets you manage. Otherwise FMC will include every Internet address any of your host communicate with. 

After you've done that, revisit the second issue. 

[chawkideeb]

Dear Marvin,

Thank you for your feedback.it is done properly.

now what about the second issue?

any idea?

why I can not see the categories in application as attached photo?

while in URL I can see it.

best Regards,

chawki dib