To create a customized Tool Template, do the following:
|
1.
|
On the left navigation pane, click , and then select Resources > Tool Templates. |
You can view two system defined templates by default.
|
2.
|
Click Create. The New Tool Template page appears. |
-
Enter the Template Name.
- Select the GS Version*.
- Enable the fastmode check box. When the fastmode option is enabled, only the fastmode supported attributes will be listed.
-
Enter the Description.
|
3.
|
Click the App Editor button. The App Editor page appears. |
|
a.
|
Click the Application Family field and select an Application Family such as antivirus, webmail that needs to be filtered from the traffic. You can also select multiple application families. |
If you choose to add or delete all the applications in a family, click Add All Application in Families or Delete All Application in Families.
Note: You can select the required applications without selecting the application family.
|
b.
|
Click the Application field and select an application or multiple applications that needs to be exported from the traffic. |
|
c.
|
Click Add to add the Application details. |
|
4.
|
Select the format (CEF/NetFlow) in which the application details need to be exported to the tool. |
|
5.
|
Select the record or template type: |
|
o
|
Segregated - The application-specific attributes and the generic attributes will be exported as individual records to the tool. |
|
o
|
Cohesive- The application-specific attributes and the generic attributes will be combined as a single record and exported to the tool. |
|
6.
|
Enter the Active timeout and Inactive timeout in seconds. |
Note: Select the Version and the Template Refresh Interval for the Netflow format.
|
7.
|
In the AdvancedSettings > Collects section, you can view and configure the following collect types: |
|
•
|
Counter - Select the Bytes and Packets. |
|
•
|
IPv4 - Select and enter the required information in the fields such as Source Address, Destination Address, Fragmentation, and Header Size and Payload Size. |
|
•
|
IPv6 - Select and enter the required information in the fields such as Source Address, Destination Address, Fragmentation, and Header Size and Payload Size. |
|
•
|
Transport -Select and enter the required information in the fields such as Source Address, Destination Address, and Header Size and Payload Size. |
By default, the above collect types are displayed. Click to add the following collect types:
|
•
|
Data Link - Select any one of the parameters such as Source Mac, Destination Mac and VLAN. |
|
•
|
Timestamp - Select the required timestamp such as System Uptime First, Flow Start, System Uptime Last, and Flow End. |
|
•
|
Flow - Select the parameter as End Reason if required. |
|
•
|
Interface - Select any one of the parameter such as Input Physical, Output Physical and Input Name. |
|
8.
|
Click Save. The new tool template is added to the list view. |
|
9.
|
Select a tool template and click the ellipsis to perform the following: |
|
•
|
View Details - To view the details in the template. |
|
•
|
Edit - To edit the parameters and fields in the template. |
|
•
|
Delete - To delete the template from the list. |
|
•
|
Duplicate - To duplicate the template in the list. |
|
•
|
Export - To export a tool template. |
Note: When a solution is fastmode enabled, you can only select the tool templates that has all the attributes supported in the fastmode. The other tool templates that are listed will be greyed out. Refer "Create an Application Intelligence Session" topic for information on fastmode.
Note: You can edit an existing template and the attributes associated with it as required, and save the updates as a new template while creating an Application Metadata Intelligence session. Refer to Create Application Metadata Intelligence for Physical Environment for details.