Return to Firewall management functions.

Viewing device statistics

The device statistics function can collect statistics on devices by day, week, and month. You can select the statistics period as needed and view the statistics report, which provides statistics on each firewall device, including the total number of events, number of blocked events, destination IP address count, source IP address count, and destination port count.

Configuration guide

From the navigation tree of the firewall management component, select Device Statistics under Device Management to enter the device statistics page, as shown in Figure 89.

Figure 89 Device statistics

Table 98 Device statistics query options

Option

Duration

Time

Description

Select the statistics duration. You can select Day, Week, or Month, or select Customize to specify a statistics duration.

Select the statistics time, whose value range varies with the statistics duration selected.

You can click the icon in the Analysis column of a device to enter the attack event analysis page. This page provides the detailed attack statistics data where you can view the detailed attack statistics in different ways. See “Event overview” for details.

Managing the device configuration database

The system provides a centralized configuration segment management interface, where there are a set of pre-defined configuration segments. You can customize your own configuration segments based on these pre-defined segments, and modify, copy, delete, export, or deploy the custom configuration segments. You can also import configuration files from devices and modify them to quickly create new configuration segments that satisfy your requirements.

Configuration guide

From the navigation tree of the firewall management component, select Device Configuration Database under Policy Management to enter the device configuration segment management page, as shown in Figure 90. On this page, you can query configuration segments by filename and file type, add, modify, or delete configuration segments, import configuration segment from a local file, or import a configuration file from a device.

85

Page 89
Image 89
HP Firewall manual Viewing device statistics, Managing the device configuration database

Firewall specifications

HP Firewall, often positioned as a key component in enterprise network security, is designed to protect sensitive data and maintain secure communications across various environments. The primary role of a firewall is to monitor incoming and outgoing network traffic and make decisions based on a set of security rules. HP Firewalls utilize a combination of hardware and software to create a robust security framework that helps organizations manage their network perimeter effectively.

One of the main features of HP Firewall is its advanced security protocols that provide deep packet inspection. This technology scrutinizes packet contents beyond the header information, analyzing data flows for signs of malicious activity. By employing Stateful Inspection, HP Firewalls maintain a state table that logs active connections, allowing the firewall to evaluate packets in the context of established sessions. This helps optimize resource usage while delivering high-performance security.

Another characteristic of HP Firewall is its integration with HP's broader security ecosystem. By working seamlessly with other HP security products, such as HP Secure Access and HP Advanced Malware Protection, organizations can deploy a multi-layered security strategy. This integration enables centralized management, streamlining security policies and improving response times against threats.

HP Firewalls also feature next-generation capabilities. This includes intrusion prevention systems (IPS) that actively monitor network traffic for suspected threats and automatically take action to block potential breaches. Additionally, these firewalls come with application awareness features, allowing organizations to enforce policies based on specific applications rather than simply based on port or protocol. This granularity enhances control over minimal use of bandwidth while simultaneously mitigating risks from unwanted applications.

Furthermore, HP Firewall models are equipped with user identity management, allowing organizations to apply security policies based on user roles and the specific needs of the business. This significantly improves the overall security posture as it adds another layer of control.

Scalability is a notable characteristic of HP Firewalls, making them suitable for both small businesses and large enterprises. Organizations can expand their security infrastructure as needed while maintaining efficiency.

In summary, HP Firewalls deliver advanced security features, scalability, and seamless integration within the HP security ecosystem. Their emphasis on deep packet inspection, real-time monitoring, and user identity management make them a powerful asset in the defense against cyber threats, ensuring that organizations can protect their critical data and maintain the integrity of their network environments.