Cisco CS-MARS-20-K9 - Security MARS 20 User Manual page 564

List of System Reports
This event ranks events detecting person-to-person file sharing protocol and chat protocol activity.
File sharing protocols such as KaZaa, Napster, EDonkey and chat protocols such as IRC, Hotline
and instant messaging protocols may not be suitable in business environments.
Activity: P2P Filesharing/Chat - Top Event Types.
•
Activity: P2P Filesharing/Chat - Top Event Types
Activity: P2P Filesharing/Chat - Top Hosts.
•
This report ranks hosts involved in P2P Filesharing and chat protocol activity. Such protocols may
not be suitable in business environments.
Activity: P2P Filesharing/Chat - Top Hosts.
•
Activity: P2P Filesharing/Chat - Top Hosts
Activity: Recreational - All Events.
•
This event details all users involved in recreational activities such as games, specific web sites such
as gambling etc.
Activity: Recreational - All Events.
•
This event details all users involved in recreational activities such as games, specific web sites such
as gambling etc.
• Activity: Recreational - Top Sources.
This report ranks the source addesses involved in recreational activities such as games, adult web
sites, stock sites etc.
• Activity: Recreational - Top Sources.
Activity: Recreational - Top Sources
Activity: Remote Access Login - All Events.
•
This report details of remote access login events (IPSec, SSLVPN, PPP, L2TP etc)
Activity: Remote Access Login - All Events.
•
This report details of remote access login events (IPSec, SSLVPN, PPP, L2TP etc)
Activity: Remote Access Login - Top User.
•
This report ranks users by remote access logins (PPP, L2TP, PPTP, IPSec).
• Activity: Remote Access Login - Top User.
This report ranks users by remote access logins (PPP, L2TP, PPTP, IPSec).
Activity: Remote Access Login Failures - All Events.
•
This event details all failed remote access login event details.
Activity: Remote Access Login Failures - All Events.
•
This event details all failed remote access login event details.
Activity: Scans - Top Destination Ports.
•
This report ranks destination ports by the total number of events detecting scanning activity for that
port. Scans involve activities such as searching for alive hosts, open services on such hosts and
detecting host configuration and application settings.
Activity: Scans - Top Destination Ports.
•
Activity: Scans - Top Destination Ports
• Activity: Scans - Top Destinations.
User Guide for Cisco Security MARS Local Controller
D-24
Appendix D System Rules and Reports
78-17020-01