Outlines visibility configuration for monitored networks, detailing alert management, syslog notifications, asset clustering, vulnerability handling, communication mapping, and IDS activation to enhance security operations and asset monitoring.
Alerts
Explains how alerts notify users about significant activity or irregularities in an industrial network, categorize data, and provide warnings to aid security monitoring.
Syslog notification details for alert types
Provides a lookup of common and alert-type-specific fields in Cisco Cyber Vision syslog notifications to help you track and investigate alert events.
Vulnerabilities
This concept explains what vulnerabilities are, how they are detected within the system, and their implications for asset security.
Communication maps
Describes how communication maps visually represent communication flows among industrial assets to help teams quickly investigate and assess risks based on abnormal flows, observed protocols, and asset relationships.
Enable IDS on a sensor
Enable the Intrusion Detection System (IDS) on a compatible Cisco sensor to activate Snort-based intrusion detection.