Manage Network Analysis Policies

Under your user name in the toolbar, the system displays a tree of available domains. To switch domains, choose the domain you want to access.

Note	Snort 2 is not supported on threat defense Version 7.7. For information on Snort 2 features that are supported in versions earlier than 7.7, refer to the management center guide that matches your threat defense version.

Procedure

Step 1

Choose one of the following paths to access the network analysis policy.

Policies > Access Control heading > Access Control, and then click Network Analysis Policy
Policies > Access Control heading > Intrusion, and then click Network Analysis Policies

Note	If your custom user role limits access to the first path listed here, use the second path to access the policy.

Step 2

Manage your network analysis policy:

Create—If you want to create a new network analysis policy, click Create Policy.

Two versions of the network analysis policy are created, a Snort 2 Version and a Snort 3 Version.
- For the Snort 2 version, see Custom Network Analysis Policy Creation for Snort 2 in the Cisco Secure Firewall Management Center Configuration Guide.
- For the Snort 3 version, see Custom Network Analysis Policy Creation for Snort 3.
Delete—If you want to delete a network analysis policy, click the Delete icon, then confirm that you want to delete the policy. You cannot delete a network analysis policy if an access control policy references it.

If the controls are dimmed, the configuration belongs to an ancestor domain, or you do not have permission to modify the configuration.
Edit—If you want to edit an existing network analysis policy, click the Edit icon.

If View () appears instead, the configuration belongs to an ancestor domain, or you do not have permission to modify the configuration.
Report—Click the Report icon; see Generating Current Policy Reports in the Cisco Secure Firewall Management Center Configuration Guide.