- Table of Contents
-
- 03-Monitor
- 01-Blacklist logs
- 02-Single-packet attack logs
- 03-Scanning attack logs
- 04-Flood attack logs
- 05-Threat logs
- 06-URL filtering logs
- 07-File filtering logs
- 08-Security policy log
- 09-Application audit logs
- 10-System logs
- 11-Operation logs
- 12-Traffic logs
- 13-TopN traffic
- 14-TopN threats
- 15-TopN URL filtering statistics
- 16-TopN file filtering statistics
- 17-Attack defense statistics
- 18-Server load balancing statistics
- 19-Link load balancing statistics
- 20-Transparent DNS proxy statistics
- 21-TopN traffic trends
- 22-TopN threat trends
- 23-TopN URL filtering trends
- 24-TopN file filtering trends
- 25-URL visit trends
- 26-Report settings
- 27-Session list
- 28-LB session information
- 29-User information center
- 30-DNS cache information
- 31-IPv4 online users
- 32-IPv6 online users
- 33-MAC authentication online users
- 34-Load balancing logging
- Related Documents
-
Title | Size | Download |
---|---|---|
22-TopN threat trends | 49.71 KB |
This help contains the following topics:
¡ Attacked target threat trend
Introduction
By analyzing the trends of detected threat events in various perspectives, the device generates the following types of threat trend reports to help illustrate the peak periods during which threats are most likely to happen and the time periods highly risky threats are most likely to happen:
· User Threat Trend.
· Application Threat Trend.
· Threat Type Threat Trend.
· Attacker Threat Trend.
· Attacked Target Threat Trend.
· Threat ID Threat Trend.
These reports help administrators adjust security policies to effectively protect the company network against threats.
On each of the preceding report configuration page, you can customize conditions such as the time range and data range for statistics collection. Then, you can generate the report and export the report as needed.
User threat trend
Perform this task to generate the user-based threat trend report and export the report.
Procedure
1. Click Stats conditions in the top left corner of the page.
2. Configure the statistics collection conditions.
Table 1 Statistics collection condition configuration items for the user-based threat trend report
Item |
Description |
User |
Select Top 5 users to collect statistics only for the top 5 users. Select Specify users and specify the users for statistics collection. |
Threat type |
Select the threat types. Options are: · IPS. · Anti-virus. · All. |
Time range |
Select a time range from the list. Options are: · Today. · Past week. · Past month. · Custom. |
3. Click Start.
4. To export the user-based threat trend report, click Export report.
Application threat trend
Perform this task to generate the application-based threat trend report and export the report.
Procedure
1. Click Stats conditions in the top left corner of the page.
2. Configure the statistics collection conditions.
Table 2 Statistics collection condition configuration items for the application-based threat trend report
Item |
Description |
Application |
Select Top 5 applications to collect statistics only for the top 5 applications. Select Specify applications and specify the applications for statistics collection. |
Time range |
Select a time range from the list. Options are: · Today. · Past week. · Past month. · Custom. |
3. Click Start.
4. To export the application-based threat trend report, click Export report.
Threat type threat trend
Perform this task to generate the threat type-based threat trend report and export the report.
Procedure
1. Click Stats conditions in the top left corner of the page.
2. Configure the statistics collection conditions.
Table 3 Statistics collection condition configuration items for the threat type-based threat trend report
Item |
Description |
Threat type |
Select a threat type. Options are: · IPS. · Anti-virus. |
Time range |
Select a time range from the list. Options are: · Today. · Past week. · Past month. · Custom. |
3. Click Start.
4. To export the threat type-based threat trend report, click Export report.
Attacker threat trend
Perform this task to generate the attacker-based threat trend report and export the report.
Procedure
1. Click Stats conditions in the top left corner of the page.
2. Configure the statistics collection conditions.
Table 4 Statistics collection condition configuration items for the attacker-based threat trend report
Item |
Description |
Attacker |
Select Top 5 attackers to collect statistics only for the top 5 attackers. Select Specify attackers and specify the attackers for statistics collection. |
Threat type |
Select the threat types. Options are: · IPS. · Anti-virus. · All. |
Time range |
Select a time range from the list. Options are: · Today. · Past week. · Past month. · Custom. |
3. Click Start.
4. To export the attacker-based threat trend report, click Export report.
Attacked target threat trend
Perform this task to generate the attacked target-based threat trend report and export the report.
Procedure
1. Click Stats conditions in the top left corner of the page.
2. Configure the statistics collection conditions.
Table 5 Statistics collection condition configuration items for the attacked target-based threat trend report
Item |
Description |
Attacked target |
Select Top 5 attacked targets to collect statistics only for the top 5 attacked targets. Select Specify attacked targets and specify the attacked targets for statistics collection. |
Threat type |
Select the threat types. Options are: · IPS. · Anti-virus. · All. |
Time range |
Select a time range from the list. Options are: · Today. · Past week. · Past month. · Custom. |
3. Click Start.
4. To export the attacked target-based threat trend report, click Export report.
Threat ID threat trend
Perform this task to generate the threat ID-based threat trend report and export the report.
Procedure
1. Click Stats conditions in the top left corner of the page.
2. Configure the statistics collection conditions.
Table 6 Statistics collection condition configuration items for the threat ID-based threat trend report
Item |
Description |
Threat ID |
Select Top 5 threat IDs to collect statistics only for the top 5 threats. Select Specify threat IDs and specify the IDs of the threats for statistics collection. |
Threat type |
Select a threat type. Options are: · IPS. · Anti-virus. |
Attack type |
Select the attack types. Options are: · Attacker. · Attacked target. · All. |
Time range |
Select a time range from the list. Options are: · Today. · Past week. · Past month. · Custom. |
3. Click Start.
4. To export the threat ID-based threat trend report, click Export report.