Viewing top attackers
The Top Attackers area of the Monitor Your Firewall page displays the IP address and domain of each top attacker.
The attackers are ranked based on the number and severity of attacks. To see the details of a particular top attacker, click the View Details link of the attacker you wish to view.
The View Attacker Details page opens.
The View Attacker Details page shows you the following attack categories and the number of each type of attack that was blocked today and this week:
•Total attacks blocked
•High risk attacks. Indicates blocked attacks that represent a serious attempt by the attacker to disable your network.
•Medium risk attacks. Indicates blocked attacks that represent a modest level of intent by the attacker to disable your network.
•Low risk attacks. Indicates blocked attacks that represent no serious threat to the network. Typically, these are probing attacks used by hackers to determine those networks on which a more serious attack will be conducted.
When you are finished viewing the log, click DONE.
Reporting attacks
Due to level of hacker activity on the Internet and the “always on” nature of broadband, it will be quite normal for the Firewall Monitor to report a number of port scans and potential attacks daily. These reports are a positive indication that your firewall is working and protecting your computers from attack.
Note: The Intelligent Gateway firewall does not provide
53
