Device packs are a way to manage supported devices for Security Manager. A device pack is a FireMon-specific software package that allows a device such as a firewall to talk to FireMon's Data Collector.
The device packs specify a matching configuration for change and for usage. The matching configuration contains one or more regular expressions and may contain group mappings to pertinent fields. These fields are captured and used in downstream processing. When a device is created, the device pack matching configuration is associated with the device in a field called extendedsettings. The default matching configuration is derived from settings in the device pack.
Device packs are updated frequently as vendor's update their software for their respective device. Each FireMon software revision contains updated device packs. If a firewall has normalization retrieval or other issues ensuring the device pack is updated will be one of the first troubleshooting steps that Support will try.
To obtain the latest device packs for your device please contact FireMon Support. The device packs are often larger than 20 MB, so Support will create SFTP credentials for you to obtain the file.
To upload a new device pack, complete the following steps.
- Navigate to Administration from within the security intelligence platform.
- On the toolbar, click Device
- On the menu, click Device Packs.
- Click Upload.
- In the Upload Device Pack dialog box, click Choose File.
- Locate the downloaded .jar device pack file, select it and then click Open.
- Click Upload.
There will be a device pack updated successfully message that appears.
- After the file is uploaded, return to the Devices page.
- From the device list, select the device that is experiencing issues.
- Click the Action icon and then click Retrieve Configuration.
This will manually request a new device configuration retrieval.