Dashboard

System

Intrusion Activity

Intrusion Activity displays the top attacks that occurred on the network. This information is gathered from attack logs.

You can edit the Intrusion Activity widget to display specific information by using the following procedure.

Figure 14: Intrusion Activity widget

To edit the information for Intrusion Activity

1Go to System > Dashboard.

2In Intrusion Activity, select Edit in the title bar area.

3Enter the appropriate information for the following:

Device

Select the registered device or device group from the drop-down

 

list.

Display by

Select one of the following to filter the log information:

 

Top Sources (to any) – filters any top source IP addresses

 

Top Destinations (from any) – filters any top destination IP

 

addresses

 

Top Intrusions – filters the top intrusion activity

 

Time Period – filters the top intrusion activity by period of time,

 

from 00:00:00 to 23:59:59 (24 hours).

Time Scope Select one of the following for the time range:

Hour – filters the time by hour

Day – filters the time by the current day

Week – filters the time by the current week

Month – filters the time by the current month

No. Entries Select the number of entries to display. For example, if you want to display 10 entries, select 10 from the drop-down list. You can specify only 5, 10, or 20.

4Select OK.

You can view the log messages that are associated with the information that displays in Intrusion Activity by selecting the links.

Virus Activity

Virus Activity displays the virus activity that has occurred on the devices. This information is gathered from virus logs. You can edit Virus Activity to display specific information.

The following procedure describes how to edit the Virus Activity widget.

 

FortiAnalyzer Version 3.0 MR7 Administration Guide

38

05-30007-0082-20080908

Page 38
Image 38
Fortinet 3.0 MR7 manual Intrusion Activity, Virus Activity, Display by