Cisco Cisco Firepower Management Center 4000

Page of 1844
 
4-31
FireSIGHT System User Guide
 
Chapter 4      Using the Context Explorer
  Understanding the Context Explorer
Hover your pointer over any part of the graph to view more detailed information. Click any part of the 
graph to drill down on that information.
Note
If you filter on intrusion event information, the Traffic by URL Category graph is hidden.
Note that you must have a URL Filtering license and enable URL Filtering for URL filtering graphs to 
include URL category and reputation data. Note also that neither the DC500 Defense Center nor Series 2 
devices support URL filtering by reputation and category, so the DC500 Defense Center cannot display 
this data and Series 2 devices do not detect it. See 
.
This graph draws data primarily from the URL Statistics and Connection Events tables.
Viewing the Traffic by URL Reputation Graph
License: 
URL Filtering
Supported Devices: 
feature dependent
Supported Defense Centers: 
feature dependent
The Traffic by URL Reputation graph, in bar form, displays counts of network traffic (in kilobytes per 
second) and unique connections for the most requested URL reputation groups (such as 
Well known
 or 
Benign sites with security risks
) on your monitored network. For each URL reputation listed, blue 
bars represent traffic data and red bars represent connection data.