In the dimension report, there are possible categories, in the dimension, where can we see more detail for "Top Blocked Botnet Sites", "Top blocked Botnet Clients", "Top Blocked Attacks", etc...
Sign In to comment.
Exactly what detail are you looking for here?
For Top Blocked Attacks, go here:
Search for the attach name. Then select the Signature ID to get more info about that IPS signature/threat.
Clicking on the CVE link should give more info about the product at risk
For example, if i see a CVE-XXXX-XXXX in Top Blocked Attacks where do I find out where it came (IP address) from and to where.
Did you click on the attack entry?
You should see Top Blocked Clients & Top Blocked Destinations
Strange it shows up now, couple days ago, the "Top Blocked Clients & Top Blocked Destinations" were not showing up, but it's there now.
Thank you again Bruce!
Dimension only reports on what it finds in the log records for the period selected.
If there is no data, then that section is not displayed.