Extreme Networks NG300 User Manual page 9

The Threat icons represent an aggregate threat count for all Sentriant NG appliances managed under the
SOC. Threat sources that have triggered rules, or that communicate with a target monitored by Sentriant
NG are assigned a priority level. Priority levels are governed by Sentriant NG appliance policies, rules,
and response modes that can be modified or configured as needed to meet network requirements.
The Sentriant NG appliance supports five priority levels:
High - the most severe priority level. High priorities take precedence over all other priorities
within SOC panels. For example, if a source has triggered a medium and high priority, only the
high threat will be shown. A high can be dismissed to a watch.
Medium - threat rules configured with medium priority take precedence over low, suspect and
watches. A medium can be escalated to a high threat or dismissed to a watch.
Low - threat rules configured with low priority take precedence over suspect and watches. A low
can be escalated to a medium or high threat priority or dismissed to a watch.
Suspect - a source that communicated with a number of unused IP Addresses within a protected
segment. A suspect can be escalated to a low, medium, or high threat. Suspect can be dismissed
to a watch.
Watch - a source that communicated within a protected segment. The source may or may not
reside within the segment. A watch can be escalated to a suspect, low, medium or high.
The Response icons represent an aggregate threat response for all Sentriant NG appliances managed
under the SOC. The detection states are described below:
Cloak - A patent-pending technique by which the Sentriant NG appliance unilaterally controls
and terminates a communications flow between two or more computers.
Sentriant NG Operation Console User Guide, Software Version 2.5
Navigating the Sentriant NG Operation Console
11