Cisco Cisco Firepower Management Center 4000

Hover your pointer over any part of the graph to view more detailed information. Click any part of the 
graph to filter or drill down on that information.

To constrain the graph so it displays only countries acting as the destinations of intrusion events, hover 
your pointer over the graph, then click 

 on the toggle button that appears. Click 

 to return 

to the default view. Note that navigating away from the Context Explorer also returns the graph to the 
default Source view.

This graph draws data primarily from the Intrusion Events table.

FireSIGHT

Any except DC500

The File Events by Sending/Receiving Country graph, in donut form, displays a proportional view of the 
countries detected in file events on your network as either sending (the default) or receiving files. The 
inner ring groups these countries together by continent. For information about geolocation information, 
see 

. For information about file event data, see 

.