Top Intrusion Sources Drill-Down - ZyXEL Communications VANTAGE REPORT - VERSION 2.3 User Manual

Vantage Report User's Guide
Table 52 Network Attack > Intrusion > Top Sources
LABEL
Settings
graph
Source
Color
Intrusions
% of Intrusions
Total

6.2.6 Top Intrusion Sources Drill-Down

Use this report to look at the top intrusion signatures for any top source.
Click on a specific source in Network Attack > Intrusion > Top Sources to open this screen.
123
DESCRIPTION
Use this field or Last ... Days to specify what historical information is included in
the report. Click Settings. The Report Display Settings screen appears.
Select a specific Start Date and End Date. The date range can be up to 30 days
long, but you cannot include days that are older than Store Log Days in System
> General Configuration. Click Apply to update the report immediately, or click
Cancel to close this screen without any changes.
This field resets to its default value when you click a menu item in the function
window (including the menu item for the same report). It does not reset when
you open or close drill-down reports.
The graph displays the information in the table visually.
• Select PIE chart or BAR chart in the drop-down list box. You can specify the
Default Chart Type in System > General Configuration.
• Move your mouse over a slice in the pie chart or a bar in the bar chart. The
yellow conversation box identifies the slice or bar.
• Click on a slice in the pie chart to move it away from the pie chart a little.
This field displays the top sources of intrusions in the selected device, sorted by
the number of intrusions by each one. If the number of sources is less than the
maximum number of records displayed in this table, every source is displayed.
Each source is identified by its IP address. If DNS Reverse is enabled in
System > General Configuration, the table displays the domain name, if
identifiable, with the IP address (for example, "www.yahoo.com/200.100.20.10").
Click on a source to look at the top intrusion signatures for the selected source.
The Top Intrusion Sources Drill-Down report appears.
This field displays what color represents each source in the graph.
This field displays the number of intrusions by each source.
This field displays what percentage of all intrusions was made by each source.
This entry displays the totals for the sources above.
Chapter 6 Network Attack