Sidewinder G2 6.1.2 Administration Guide - Glossary of Technical ...

Figure 218: Attacks by
Service window
About the Attacks
by Service window
In this area, you can:
Chapter 18: Monitoring
Viewing IPS attack and system event summaries
• Change the displayed statistics based on time period by selecting different
options in the Display summary statistics for drop-down list. The range of
options vary depending on the Sidewinder G2’s uptime.
• View audit data for any system event or attack category by clicking the
magnifying glass .
• View a snapshot of all attacks listed by service by clicking
Attacks by Service. See “About the Attacks by Service window” on page
523 for more information.
• View and save attack audit data by clicking Most Recent IPS Attacks.
• View an individual audit record by double-clicking that audit event’s row.
See “About the Audit Record window” on page 524 for more information.
Use this area of the dashboard to monitor the following:
• System events by severity — Lists system audit events according to
severity
• Attacks by severity — Lists audit attack events according to severity
• Attacks by service — Lists audit attack events according to service
• Most recent IPS attacks — Displays the audit events for recent attacks
Note: Use the Admin Console’s IPS Attack Responses and System Event
Responses to determine how Sidewinder G2 reacts to different audit events. For
more information, see the “IPS Attack and System Event Responses” chapter.
This window displays audit of suspect traffic. Information provided includes:
• Name — Name of the service being attacked
• Count — Number of attack instances
On this window, you can:
• Click Refresh to update the information.
• Select a service and click Show Audit to see the audit output. You can also
view the audit by clicking the magnifying glass on the main window.
• Click Close to return to the main window.
523