Data on the Network Map times out after a period of time if no meaningful traffic is observed to/from the hosts. A pruning process occurs in the background every three minutes removing hosts exceeding the time out period.
When a backup is restored, the FireSIGHT network map data is restored from an earlier point in time. It can happen, depending on how much time has elapsed since the backup has been generated, that the "last time seen" value for all the hosts is older than the time out period, causing them to be deleted from the network map within three minutes of having been restored from the backup. You can change the timeout value by following the steps below:
Navigate to Policies > Network Discovery.
Click on the Advanced tab.
Underneath the Network Discovery Data Storage Settings section, you will find the default values.
If you want to change the values, click the Pencil to edit.
Once the pop up window loads, enter in your new values and click Save.
Show Name: Finding Your Firepower Contributors: Kevin Klous, Ben Ritter,
Jay Johnston, Magnus Mortensen Posting Date: September 12, 2016
Description: The podcast team dive into Firepower technologies and
deployment strategies for some of the Firepower Pro...