TRITON - Web Security Help, Version 7.7 - Websense

The Web Security Dashboardexported; not just those for the user, IP address, hostname, or severity level currentlydisplayed on the page.How severity is assigned to suspicious activityTRITON - Web Security Help | Web Security Solutions | Version 7.7.xThe Websense Master Database assigns a severity level to threat-related events basedon the category assigned to the request.Severity levels are mapped to categories in the Websense Master Database, andmay change when the Master Database is updated.Websense Web Filter and Websense Web Security subscriptions do not includesome or all categories with High and Critical severity levels. These categoriesmay appear on the Threats dashboard, but not be available for filtering.Click the Severity Mapping link near the top of the Threats dashboard for a currentlist of the categories that have an associated severity ranking. The list indicates anycategories that are not available for filtering with your subscription.Reviewing threat incident detailsTRITON - Web Security Help | Web Security Solutions | Version 7.7.xWhen an administrator selects an incident in the table at the top of the Threats > EventDetails page, the area below the table is populated with all available details about theincident. The available details may vary based on:What type of incident occurred. For example:• A outbound request for a URL that is assigned to a blocked category by theMaster Database is unlikely to include a threat name, intent, or type, becausethe request is blocked before Content Gateway analysis occurs.• A request that does not include an attempted file transfer does not includeforensic data.The integration providing Internet request information to Filtering Service. Forexample:• Only Content Gateway passes hostname, threat name, threat intent, threattype, and scanning category information.• Not all integrations pass protocol, method, or content type information.Whether any file transfer attempts were associated with the incident. (OnlyContent Gateway provides this type of forensic data.) See Reviewing threatrelatedforensic data, page 41.TRITON - Web Security Help 39