Table Of Contents

Working with the Security Manager User Interface

Security Manager User Interface Overview

Security Manager Views

Device View Interface Overview

Map View Interface Overview

Policy View Interface Overview

Menu Bar Reference

File Menu

Edit Menu

View Menu

Policy Menu

Map Menu

Tools Menu

Activities Menu

Help Menu

Toolbar Reference

Using Selectors

Selecting Items from Selectors

Managing Items in Selectors

Filtering Items in Selectors

Using Wizards

Using Rules Tables

Filtering Tables

Table Columns and Column Heading Features

Understanding Rules Table Sections

Working with Rules Table Data

Using Main Menu Table Commands

Using Rules Table Buttons

Using Text Boxes

Finding Text in Text Boxes

Navigating Within Text Boxes

Selecting or Specifying a File or Directory on the Server File System

Accessing Online Help

Working with the Security Manager User Interface

---

The following topics describe how to use the Security Manager user interface:

•Security Manager User Interface Overview

•Security Manager Views

•Menu Bar Reference

•Toolbar Reference

•Using Selectors

•Using Wizards

•Using Rules Tables

•Using Text Boxes

•Selecting or Specifying a File or Directory on the Server File System

•Accessing Online Help

Security Manager User Interface Overview

The interface you employ to use Security Manager consists of a series of dynamic parts. Foremost among the interface parts are the three views:

•Device view

•Policy view

•Map view

Each view presents a different way to access Security Manager functionality. What you can do, and how you do it, are determined by the view you select. In the Device and Policy views you see two selectors on the left and a work area on the right. In each of these, your selection in the upper selector determines what you can select in the lower selector. Your selection in the lower selector determines what you view in the work area. This design enables you to quickly and easily drill down to the network details that you want to view or edit.

Map view presents your network in a topographical manner. A small navigation window enables you to determine the portion and scale of the displayed map.

For more information on the three views, see Security Manager Views.

The View menu contains navigation commands that change the contents of the work area in the main window. For more information about the View menu, see View Menu.

Typically, you perform most functions in Security Manager from the work area. Alternatively, you can open work areas in a separate windows, called tools. This design enables you to maintain your location in the current work area while you do related work using tools. For example, the Policy Object Manager tool appears in a separate window, allowing you to create policy objects while maintaining your location in the work area.

The Tools menu contains commands that open a tool in a separate window. For more information about the Tools menu, see Tools Menu.

The main toolbar contains navigation buttons that open functional areas of the user interface. For more information about these navigation buttons, see Toolbar Reference.

Comprehensive details on other interface elements, including the menu bar, online help, selectors, wizards, tables, and text boxes are presented in the following sections:

•Menu Bar Reference

•Toolbar Reference

•Using Selectors

•Using Wizards

•Using Rules Tables

•Using Text Boxes

•Accessing Online Help

Security Manager Views

This section provides an illustrated interface overview of each Security Manager view:

•Device View Interface Overview

•Policy View Interface Overview

•Map View Interface Overview

You can find details on using each Security Manager view in the following chapters:

•Chapter 6, "Managing the Device Inventory"

•Chapter 7, "Managing Policies"

•Chapter 4, "Using Map View"

Device View Interface Overview

Figure 3-1 identifies the functional areas of the Device view.

Figure 3-1 Device View Interface

1	Title bar	2	Menu bar
3	Toolbar	4	Work area
5	Policy selector	6	Device selector

The title bar displays the following information about Security Manager:

•Your login name.

•The name of the Security Manager server to which you are connected.

•If Workflow mode is enabled, the name of the open activity.

Related Topics

•Chapter 6, "Managing the Device Inventory"

•Menu Bar Reference

•Toolbar Reference

•Using Selectors

Map View Interface Overview

Figure 3-2 identifies the functional areas of the Map view.

Figure 3-2 Map View Interface

1	menu bar	2	navigation window
3	map toolbar	4	map

Related Topics

•Appendix B, "Map View User Interface Reference"

•Chapter 4, "Using Map View"

•Toolbar Reference

•Using Selectors

Policy View Interface Overview

Figure 3-3 identifies the functional areas of the Policy view.

Figure 3-3 Policy View Interface

1	Title bar	2	Menu bar
3	Toolbar	4	Policy type selector
5	Policy filter	6	Shared policy selector
7	Work area

Related Topics

•Appendix D, "Policy User Interface Reference"

•Chapter 7, "Managing Policies"

•Menu Bar Reference

•Toolbar Reference

•Using Selectors

Menu Bar Reference

The menu bar contains menus with commands for using Security Manager. Commands may become unavailable depending on the task you are performing.

The menus in the menu bar are described in the following topics:

•File Menu

•Edit Menu

•View Menu

•Policy Menu

•Map Menu

•Tools Menu

•Activities Menu

•Help Menu

File Menu

Table 3-1 describes the commands on the File menu. The menu items differ depending on the workflow mode.

Table 3-1 File Menu 

Command	Description
New Device	Initiates the wizard to add a new device. See Adding Devices to the Device Inventory, page 6-7.
Clone Device	Creates a device by duplicating an existing device. See Cloning a Device, page 6-24
Delete Device	Deletes a device. See Deleting Devices from the Security Manager Inventory, page 6-25.
Save	Saves any changes made on the active page, but does not submit them to the Security Manager database.
View Changes (non-Workflow mode only)	Opens the Activity Change Report (in PDF format) for the current configuration session. To see changes for the current activity in Workflow mode, select Activities > View Changes.
Validate (non-Workflow mode only)	Validates the changes you have saved. See Validating an Activity, page 8-11. To validate the current activity in Workflow mode, select Activities > Validate Activity.
Submit (non-Workflow mode only)	Submits all changes made since the last submission to the Security Manager database. To validate the current activity in Workflow mode, select Activities > Submit Activity.
Submit and Deploy (non-Workflow mode only)	Submits all changes made since the last submission to the Security Manager database and deploys all changes made since the last deployment. See Understanding Deployment, page 18-1. In Workflow mode, you must have your activity approved and then create a deployment job to deploy changes to devices.
Deploy (non-Workflow mode only)	Deploys all changes made since the last deployment. See Understanding Deployment, page 18-1. In Workflow mode, you must have your activity approved and then create a deployment job to deploy changes to devices.
Discard (non-Workflow mode only)	Discards all configuration changes since the last submission. To validate the current activity in Workflow mode, select Activities > Discard Activity.
Edit Device Groups	Edits device groups. See Working with Device Groups, page 6-28.
New Device Group	Adds a device group. See Creating Device Groups, page 6-31.
Add Devices to Group	Adds a device to a group. See Adding Devices to or Removing Them From Device Groups, page 6-31.
Print	Prints the active page. Not all pages can be printed. If the Print command is not available, you cannot print the active page.
Exit	Exits Security Manager.

Related Topics

•Understanding Activities, page 8-1

•Understanding Deployment, page 18-1

Edit Menu

Table 3-2 describes the commands on the Edit menu. You can typically use these commands only when you are working with a table in a policy.

Table 3-2 Edit Menu 

Command	Description
Cut	Cuts the selected text and saves it on the clipboard.
Copy	Copies the selected text and saves it on the clipboard.
Paste	Pastes the text from the clipboard to the cursor's location.
Add Row	Adds a row into the active table.
Edit Row	Edits a table row.
Delete Row	Deletes a table row.
Move Row Up	Moves a table row up in the table.
Move Row Down	Moves a table row down in the table.

Related Topics

•Using Rules Tables

View Menu

The View menu contains commands to navigate within the user interface.

Table 3-3 View Menu 

Menu Command	Description
Device View	Opens Device view. See Device View Interface Overview.
Map View	Opens Map view. See Map View Interface Overview.
Policy View	Opens Policy view. See Policy View Interface Overview.

Related Topics

•Menu Bar Reference

Policy Menu

The Policy menu contains commands for managing policies.

Table 3-4 Policy Menu 

Menu Command	Description
Share Policy	Saves the active local policy as a shared policy. See Sharing a Local Policy, page 7-25.
Unshare Policy	Saves the active shared policy as a local policy. See Unsharing a Policy, page 7-27.
Assign Shared Policy	Assigns shared policies to devices. See Assigning a Shared Policy to a Selected Device, page 7-28.
Unassign Policy	Unassigns the current policy from the selected device. See Unassigning a Policy, page 7-22.
Copy Policies Between Devices	Copies policies between devices. See Copying Policies Between Devices, page 7-21
Share Device Polices	Enables you to share local device policies. See Sharing a Local Policy, page 7-25.
Edit Policy Assignments	Edits assignment of shared policies to devices. See Modifying Policy Assignments in Policy View, page 7-38.
Save Policy As	Saves a copy of a policy with a new name.
Rename Policy	Renames a policy.
Add Local Rules	Adds local rules to a shared policy on a device. You must select a rule-based shared policy to use this command.
Inherit Rules	Edits policy inheritance. See Inheriting Rules, page 7-30
Discover Policies on Device	Discovers policies on a device. See Discovering Policies, page 7-11
Discover VPN Policies	Opens the Discover VPN Policies wizard. See Site-To-Site VPN Discovery, page 10-8.

Related Topics

•Chapter 7, "Managing Policies"

•Appendix D, "Policy User Interface Reference"

Map Menu

The Map menu contains commands for using the Map view. The commands in this menu are available only when the Map view is open.

Table 3-5 Map Menu 

Menu Command	Description
New Map	Creates a map.
Open Map	Opens a saved map or the default map.
Show Devices On Map	Selects the managed devices to show on the active map.
Show VPNs On Map	Selects the VPNs to show on the active map.
Add Map Object	Creates a map object on the open map.
Add Link	Creates a Layer 3 link on the open map.
Find Map Node	Finds nodes on the open map.
Save Map	Saves the open map.
Save Map As	Saves the open map with a new name.
Zoom In	Zooms in on the map.
Zoom Out	Zooms out from the map.
Fit to Window	Zooms the open map to display the entire map.
Display Actual Size	Zooms the open map to display at actual size.
Refresh Map	Refreshes the open map with updated network data.
Export Map	Exports the open map to a file.
Delete Map	Deletes the map you select from a list.
Map Properties	Displays or edits properties for the open map.
Show/Hide Navigation Window	Displays or hides the navigation window on the open map.
Undock/Dock Map View	Undocks the maps window, allowing you to use other features while keeping the map open. If the window is already undocked, the Dock Map View command reattaches the window to the primary Security Manager window.

Related Topics

•Appendix B, "Map View User Interface Reference"

•Chapter 4, "Using Map View"

Tools Menu

The Tools menu contains commands that start tools that run in a window separate from the Security Manager main interface. This enables you to access features without closing the page from which you are currently working.

Table 3-6 Tools Menu 

Menu Command	Description
Device Properties	Provides general information about the device, including credentials, the group the device is assigned to, and policy overrides. For more information, see Understanding Device Properties, page 6-5.
Policy Object Manager	Allows you to view all available objects grouped according to object type; access all object dialog boxes to create, copy, edit, and delete objects; and generate usage reports, which describe how selected objects are being used by other Security Manager objects and policies. For information see Understanding the Policy Object Manager Window, page 9-4.
Site-to-Site VPN Manager	Enables you to configure site-to-site VPNs. See Chapter 10, "Managing Site-to-Site VPNs"
Deployment Manager	Enables you to deploy configurations and manage deployment jobs. See Chapter 18, "Managing Deployment"
Activity Manager (Workflow mode only)	Allows you to create and manage activities. See Activity Manager Window, page E-1.
Policy Discovery Status	Allows you to see the status of policy discovery and device import from the Policy Discovery Status page. See Viewing Policy Discovery Task Status, page 7-15.
Show Containment	Shows security contexts or service modules for a device. See Showing Device Containment, page 6-24.
Inventory Status	Allows you to view and export device summary information for all devices. See Viewing Inventory Status, page 6-25.
Export Inventory	Allows you to export the device inventory to a file that you can import into CiscoWorks Common Services Device Credential Repository (DCR) or Cisco Security Monitoring, Analysis and Response System (CS-MARS). See Exporting the Device Inventory in DCR or CS-MARS Format, page 6-26.
Catalyst Summary Info	Allows you to view high-level system information, including any service modules, ports, and VLANs that Security Manager has discovered. See Catalyst Summary Info Page, page M-1.
Device Manager	Allows you to start device managers for all supported devices, such as PIX security appliances, Firewall Services Modules (FWSM), IPS sensors, IOS routers, and Adaptive Security Appliance (ASA) devices. Device managers provide several monitoring and diagnostic features that enable you to get information regarding the services running on the device and a snapshot of the overall health of the system. See Device Managers, page 21-1.
IPS Event Viewer	Allows you to monitor small-scale IPS deployments. IEV monitors individual IPS devices and lets you view and manage alerts for up to five sensors. See IPS Event Viewer, page 21-22.
Apply IPS Update	Allows you to manually apply IPS image and signature updates. See Apply IPS Update Wizard, page A-22.
Preview Configuration	Displays the proposed changes, last deployed configuration, or current running configuration for specific devices. See Config Version Viewer (Preview Configuration) Dialog Box, page N-17.
Device OS Management	Provides access to Resource Manager Essentials (RME) Software Image Manager (SWIM) and Inventory Reporting, according to access settings in the Security Manager administration pages. See Managing the Device Operating System, page 6-28.
Audit Report	Allows you to generate audit report data according to parameters set in the audit report page. See Audit Report Window, page E-9.
Change Reports (non-Workflow mode only)	Allows you to generate a report of changes to devices, shared policies, and policy objects for a previous configuration session. See Viewing Activity Change Reports, page 8-10. To view changes for the current configuration session, select File > View Changes.
Configuration Archive	Stores archived device configuration versions and allows you to view, compare, and roll back from one configuration to another. See Configuration Archive Window, page N-26.
Backup	Allows you to back up the Security Manager database using CiscoWorks Common Services. See Backing up and Restoring the Security Manager Database, page 20-13.
Security Manager Diagnostics	Describes how to gather troubleshooting information and contact the Technical Assistance Center (TAC). See Creating a Diagnostics File for the Cisco Technical Assistance Center, page 20-13.
Security Manager Administration	Details administrative settings, recommends which settings to define first, and explains user permissions and access modalities. For information, see Appendix A, "Administrative Settings User Interface Reference".

Activities Menu

The Activities menu contains commands for managing activities. It appears only when Workflow mode is enabled.

Table 3-7 Activities Menu 

Menu Command	Description
New Activity	Creates a new activity. See Creating an Activity, page 8-9.
Open Activity	Opens an activity. See Opening an Activity, page 8-9.
Close Activity	Closes the open activity. See Closing an Activity, page 8-9.
View Changes	Opens the Activity Change Report (in PDF format). See Viewing Activity Change Reports, page 8-10.
Validate Activity	Validates the open activity. See Validating an Activity, page 8-11.
Submit Activity	Submits the open activity. See Submitting an Activity for Approval, page 8-13.
Approve Activity	Approves the open activity. See Approving or Rejecting an Activity, page 8-14.
Reject Activity	Rejects the open activity. See Approving or Rejecting an Activity, page 8-14.
Discard Activity	Discards the open activity. See Discarding an Activity, page 8-14.

Related Topics

•Chapter 8, "Managing Activities"

Help Menu

The Help menu contains commands for accessing product documentation and training.

Table 3-8 Help Menu 

Menu Command	Description
Help Topics	Opens the online help system.
Help About This Page	Open online help for the active page.
JumpStart	Opens the JumpStart.
Security Manager Online	Opens the Security Manager web page on Cisco.com.
About Security Manager	Displays information about Security Manager.

Related Topics

•Accessing Online Help

Toolbar Reference

The main toolbar (see the illustration Figure 3-1) contains buttons that perform actions in Security Manager.

The buttons that appear on the main toolbar vary depending on whether Workflow mode is enabled. The following table presents all buttons.

Table 3-9 Security Manager Toolbar 

Button	Description
	Opens the Device view. For more information, see Chapter 6, "Managing the Device Inventory"
	Opens the Map view. For more information, see Chapter 4, "Using Map View"
	Opens the Policy view. For more information, see Chapter 7, "Managing Policies"
	Opens the Policy Object Manager tool. For more information, see Chapter 9, "Managing Objects"
	Opens the Site-to-Site VPN Manager tool. For more information, see Chapter 10, "Managing Site-to-Site VPNs"
	Opens the Deployment Manager tool. For more information, see Chapter 18, "Managing Deployment"
	Opens the Audit Report tool. For more information, see Understanding Audit Reports, page 20-10.
	Submits and deploys changes. For more information, see Chapter 18, "Managing Deployment"
	Opens online help for the current page. For more information, see Help Menu.
	Opens the Activity Manager window, where you can create and manage activities. For more information on the following activity buttons, and the conditions under which they are enabled, see Accessing Activity Functions, page 8-7.
	Adds a new activity.
	Opens an activity.
	Saves all changes made while the activity was open and closes it.
	Submits the activity for approval.
	Approves the changes proposed in an activity. Active when Workflow mode is enabled with an approver.
	Rejects the changes proposed in an activity. Active when Workflow mode is enabled with an approver.
	Discards the selected activity.
	Validates the integrity of changed policies within the current activity.

Using Selectors

Selectors appear in several places in the user interface; for example, the Device selector in Device view (see Figure 3-1). These tree structures enable you to select items (like devices) on which to perform actions. Several types of items can appear in a selector, depending on the task you are performing.

The following topics describe how to use the standard features of the selector:

•Selecting Items from Selectors

•Managing Items in Selectors

•Filtering Items in Selectors

Selecting Items from Selectors

Items in selectors are presented in a hierarchy of folders according to their organization in Security Manager.

You can browse for items in a selector by expanding and collapsing folders, which can contain other folders, items, or a combination of folders and items. To expand and collapse a folder, click the arrow next to it. Select an item by clicking it.

The selectors support auto select. That is, when you type a single letter the next folder or item in the selector that begins with that letter is selected.

Managing Items in Selectors

To manage an item in a selector, right-click the item to open its context menu. The commands in the context menu vary according to the item type.

For more information about the management options that appear in selectors, see the following topics:

•Chapter 6, "Managing the Device Inventory"

•Chapter 7, "Managing Policies"

Filtering Items in Selectors

To view a subset of the items in a selector, you can create filters to display only those items that match the criteria you specify. You can have a maximum of 10 filters per user for each selector. After that, when you create another filter, that new filter replaces the oldest filter. There is no duplication check for filters that are created. You cannot delete filters manually.

A filter list appears above all selectors that can be filtered. From this list, you can do the following:

•Select a filter that you created previously.

•Select None to see the tree without any filters applied to it.

•Select Create Filter to create a filter.

Each filter can contain several filter rules. Each filter rule specifies a rule type, criteria, and values. You select whether items must match any or all filter rules before they can be displayed in the selector.

When you create a filter, the fields that you can filter on depend on the types of items displayed in the filter. However, the general procedure is the same for all selectors.

For information on filtering tables, see Filtering Tables.

---

Tip When you filter a selector, that filter might remain applied to the selector when you open another window that includes the selector. For example, when you apply a filter to the Device selector in Device view, that filter is applied to the selector if you open the New Device wizard. If you have problems finding an item in a selector, check the Filter field to see if a filter is being applied.

---

---

Step 1 Select Create Filter from the selector filter field to open the Create Filter dialog box.

Step 2 Select one of the radio buttons to determine the matching criteria. The choices are:

•Match Any of the Following—Creates an OR relationship among the filter criteria. Policies matching any of your criteria are included in the filter.

•Match All of the Following—Creates an AND relationship among the filter criteria. Only those policies matching all your criteria are included in the filter.

Step 3 Establish a filter rule by entering three criteria, as follows:

•From the first list, select the type to be filtered; for example, Name.

•From the next list, select the operating criteria for the filter; for example, contains.

•In the final field, enter or select a value on which to filter; for example Cisco.

Step 4 Click Add.

---

Tip If you make a mistake in forming the filter rule, select the rule and click Remove to delete it.

---

Step 5 Add any additional filter rules that you require. Click OK when you are finished.

The selector is filtered according to the new filter criteria, and the new filter is added to the filter list.

---

Using Wizards

Some tasks that you can perform with Security Manager are presented as wizards. A wizard is a series of dialog boxes (or steps) that enables you to perform a task. The current step number and the total number of steps in the wizard are displayed in the wizard title bar.

Wizards share the following buttons:

•Back—Returns to the previous dialog box. Enables you to review and modify settings that you defined in previous wizard steps.

•Next—Continues to the next dialog box. If this button is unavailable, you must define some required settings in the current dialog box before you can continue. Required settings are marked with an asterisk (*).

•Finish—Finishes the wizard, saving the settings you defined. You can finish the wizard whenever this button is available. If this button is not available, you must define more settings.

•Cancel—Closes the wizard without saving any settings.

•Help—Opens online help for the wizard.

Using Rules Tables

Rules tables in Security Manager display sets of rules (for example, access rules) that make up a policy.

Figure 3-4 details the GUI used in Rules table.

Figure 3-4 Rules Table Example

1	Device and Policy Identification	2	Table filter
3	Table column headings	4	Inherited or local rules
5	New section heading	6	Work area with rules listed
7	Table tools menu	8	Table buttons

The following topics describe standard features of rules tables:

•Filtering Tables

•Table Columns and Column Heading Features

•Understanding Rules Table Sections

•Working with Rules Table Data

•Using Main Menu Table Commands

•Using Rules Table Buttons

Filtering Tables

To view a subset of the items in a table, you can create filters to display only those rows that match the criteria you specify. You can have a maximum of 10 filters per user for each table. After that, when you create another filter, that new filter replaces the oldest filter. There is no duplication check for filters that are created. You cannot delete filters manually.

From the filter list, you can do the following:

•Select a filter that you created previously.

•Select Advanced Filter to create a filter.

•Select a type (column heading) from which to define a filter; for example, Service.

•Modify an existing filter.

Each filter can contain several filter rules. Each filter rule specifies a rule type, criteria, and values. You select whether items must match any or all filter rules before they can be displayed in the selector.

---

Step 1 To filter a table, select a filter from the Filter list.

The table display is filtered according to the filter selected.

Step 2 To create a new filter, select Advanced Filter from the table filter list on the left.

The Create Filter dialog box appears.

a. Select one of the radio buttons to determine the matching criteria. The choices are:

•Match Any of the Following (OR)

•Match All of the Following (AND)

b. Establish a filter rule by entering three criteria, as follows:

•From the first list, select the type (column) to be filtered; for example, Name.

•From the next list, select the operating criteria for the filter; for example, contains.

•In the text box, type a value on which to filter; for example Cisco.

c. Click Add. If you make a mistake in forming the filter rule, select the rule and click Remove to delete it.

d. Add any additional filter rules that you require.

e. Click OK.

The table display is filtered according to the new filter criteria, and the new filter is added to the filter list.

Step 3 To create a new filter by type, follow these steps:

---

Note This method uses only "AND" logic. To use "OR" logic, you must create the filter using Advanced Filter.

---

a. Select the type (for example, Destination) from the table filter list on the left.

The selection appears in the filter list.

b. Next, select a matching criteria (for example, Contains) from the middle list.

c. In the third field, enter the value on which to filter.

d. Click Apply.

The table display is filtered according to the new filter criteria, and the new filter is added to the filter list.

e. Repeat the process to add an additional rules to the filter.

---

Note You can continue to add rules to the current filter, and view the results, until you click Clear.

---

Step 4 To modify a filter, follow these steps:

---

Note Modifications use only "AND" logic. To use "OR" logic, you must create a new filter using Advanced Filter.

---

a. Select the filter from the table filter list on the left.

The filter appears in the filter list and the table is filtered.

b. Select the type (for example, Destination) from the table filter list on the left.

The selection appears in the filter list.

c. Next, select a matching criteria (for example, Contains) from the middle list.

d. In the third field, enter the value on which to filter.

e. Click Apply.

The table display is filtered according to the new filter criteria, and the new filter is added to the filter list.

Step 5 To remove an applied filter, click the Clear button on the top right portion of the filter page. All filtering is removed from the table.

---

Table Columns and Column Heading Features

Rules tables (and certain other types of tables) contain columns, each of which has a column heading in the heading row. These columns and their headings include the following features:

•Show/hide Columns—Right-click the table heading row to open the context menu and then select Show Columns. This menu enables you to select which columns appear.

---

Note The table for some policies does not display all available columns as a default. You must right-click and use the Show columns feature of the context menu to ensure that information from all columns can be viewed.

---

•Show Details/Show Summary—Right-click the table heading row to open the context menu and then select either Show Details or Show Summary. This toggling menu enables you to select whether to view detailed or summarized information in the table.

•Move columns—Click and drag a column heading to move the column to a new position.

•Resize columns—Click a column heading divider (when the cursor turns into an arrow) and drag it to resize the column.

•Sort by column headings—Click a column heading to sort the table by that column's contents. Click the same column heading again to reverse the sort order. The sorted column has an arrow next to its heading.

Understanding Rules Table Sections

Rules tables can contain sections, which contain groups of rules. Expand and collapse these sections by clicking the arrow next to the section title.

The grouping of rules into sections is determined by policy inheritance. For more information about policy inheritance, see Understanding Rule Inheritance, page 7-4.

Working with Rules Table Data

To work with table data, you must select the data first. You can select rules table data at the following levels of granularity:

•Row

•Cell value

•Subcell value

When you open a table, the first row is selected by default. You can then select other data to work with. The selected data is highlighted.

Click the first cell in a row to select the row. Double-click the "No." cell in a row to edit the row (or view its properties, if you do not have privileges to edit it). Right-click the first cell in a row to open the row context menu.

Click a cell or cell value (also referred to as a subcell) to select it. Double-click a cell or cell value to edit it (or view its properties, if you do not have privileges to edit it). Right-click a cell or cell value to open its context menu.

To select multiple contiguous rows, press the Shift key while clicking the first cell of the first and last rows. To select multiple non-contiguous rows, press the Crtl key while clicking the first cell in each desired row. You can select only one cell or cell value at a time.

Table 3-10 describes the commands that appear in the rules table context menus. Other commands can also appear in the context menus that are specific to the type of data you select.

---

Note Menu commands might vary depending on the value selected and user permissions.

---

Table 3-10 Rules Table Context Menu Commands 

Menu Command	Description
Edit Subcell Value	Edits the selected subcell value.
Remove Subcell Value	Removes the selected subcell value.
Show SubcellValue Contents	Displays the properties of the selected subcell value.
Edit SubcellValue Contents	Enables inline editing of the selected subcell value.
Create Object from Subcell Value	Creates a policy object from the selected subcell contents.
Find Usage	Identifies devices, policies, and other objects that use the value.
Edit Value	Enables inline editing of the cell value.
Show Value Contents	"Flattens" the value to display all of its components.
Create Object from Cell Contents	Creates a policy object from the selected cell content.
Remove Value	Deletes the selected cell value.
Add Row	Adds a row below the selected row.
Edit Row	Edits the selected row.
Delete Row	Deletes the selected row.
View Row	Displays the properties of the selected row.
Cut	Cuts the selected data.
Copy	Copies the selected data.
Paste	Pastes data in the current location. If the pasted data is a row, a new row is created below the selected row.
Move Row Up	Moves the row up one position in the table.
Move Row Down	Moves the row down one position in the table.
Include in New Section	Opens a dialog box for creating a new section in the table.
Enable/Disable	Enables or disables the rule in the table. A disabled rule is shown with hash marks.

Using Main Menu Table Commands

The Edit menu in the main menu contains commands for using rules tables as detailed in Table 3-11.

Table 3-11 Edit Menu Rules Table Commands 

Menu Command	Description
Insert Row	Inserts a row below the selected row.
Edit Row	Edits the selected row.
Delete Row	Deletes the selected row.
View Row	Displays the properties of the selected row.
Move Row Up	Moves the row up.
Move Row Down	Moves the row down.

Using Rules Table Buttons

Rules tables include the buttons described in Table 3-12. A rules table can also include other buttons that are specific to the policy type:

Table 3-12 Rules Table Buttons 

Button	Description
Add Row	Adds a row.
Edit Row	Edits the selected row.
Delete Row	Deletes the selected row.
Up Row	Moves the selected row up in the table.
Down Row	Moves the selected row down in the table.

Using Text Boxes

Text boxes that can contain multiple text lines include several features to make them easier to use. These features are described in the following topics:

•Finding Text in Text Boxes

•Navigating Within Text Boxes

Finding Text in Text Boxes

Use the Find dialog box to find text within a multiple line text field.

---

Step 1 Click in a multiple line text field.

Step 2 Press Ctrl+F. The Find dialog box opens.

Step 3 Enter text to search for in the Find what field.

Step 4 To specify the direction of the search, select either Up or Down in the Direction field.

Step 5 To match the case of the text you entered, select the Match Case check box.

Step 6 Click Find. The next occurrence of your search text is highlighted in the text field.

---

Navigating Within Text Boxes

Use the Goto line dialog box to navigate to a specific line in a multiple line text field.

---

Step 1 Click in a multiple line text field.

Step 2 Press Ctrl+G. The Goto line dialog box opens.

Step 3 Enter a line number in the Line number field.

Step 4 Click OK. The text field scrolls to the line number you entered.

---

Selecting or Specifying a File or Directory on the Server File System

Cisco Security Manager uses a standard file system browser to let you select a directory or file or to specify a file. You can create or select files only on the Security Manager server. You cannot use a drive mounted on the server, and you cannot use your client system.

Typically, to create or select a file, you click a Browse button to open a dialog box that has a title related to the action you are performing (for example, Choose Files when selecting configuration files). The Browse button appears on various dialog boxes throughout the product.

In the dialog box, use the folder tree on the left to navigate to the folder you want:

•If you are selecting a file, find it in the folder tree and select it in the right pane. If the action you are taking allows you to select multiple files, use Ctrl+click to select files individually, or Shift+click to select a range of files. You might also need to select a file type to view only those files that apply to your action.

•If you are specifying (creating) a file, navigate to the folder in which you want to create the file, enter a file name, and select the appropriate file type.

Accessing Online Help

To access online help for Security Manager, do one of the following:

•To open the main Security Manager online help page, select Help > Help Topics.

•To open context-sensitive online help for the active page, select Help > Help About This Page or click the Help button in the toolbar.

•To open context-sensitive online help for a dialog box, click Help in the dialog box.

---

Tip You must configure Internet Explorer to allow active content to run on your computer for the online help to open unblocked. In Internet Explorer, select Tools > Internet Options and click the Advanced tab. Scroll to the Security section, and select Allow active content to run in files on My Computer. Click OK to save the change.

---

Related Topics

•Help Menu