Url Threat Filter - ZyXEL Communications USG FLEX H Series User Manual

The following table describes the labels in this screen.
Table 36 Security Statistics > Reputation Filter > DNS Threat Filter
LABEL
Last 24 Hours Summary
Top Entries By
Refresh
Flush Data
DNS Threat Filter Events
Time
+ Allow List
DNS Name
Category
Source IP
Apply
Reset

5.7.3 URL Threat Filter

This screen displays URL threat filter statistics. URL threat filtering compares access to specific URLs
against a database of blocked or allowed sites.
Chapter 5 Monitor
DESCRIPTION
Use this field to have the following (read-only) table display the top DNS threat filter log
entries by Category, Source IP or DNS Name. This table displays the most common,
recent DNS threat filter logs. See the log screen for less common DNS threat filter logs or
use a syslog server to record all DNS threat filter logs.
Select Category to list the most common categories of packets that the Zyxel Device has
detected.
Select Source IP to list the most common source IP addresses of traffic.
Select DNS Name to list the most common FQDNs of the infected websites.
Click this button to update the report display.
Click this button to discard all of the screen's statistics and update the report display.
This field displays the date and time the entry was created.
Select an entry and click this to add it to the DNS filtering allow list.
This field displays the FQDN of an infected website.
This field displays the category of the entry.
This field displays the source IP address of traffic that you want to trace.
Click Apply to save your changes back to the Zyxel Device.
Click Reset to return the screen to its last-saved settings.
USG FLEX H Series User's Guide
73