Cisco Cisco Firepower Management Center 4000

Protection

The Intrusion Events widget shows the intrusion events that occurred over the dashboard time range, 
organized by priority. This includes statistics on intrusion events with dropped packets and different 
impacts. This widget appears by default on the Intrusion Events tab of the Summary Dashboard.

On managed devices, the widget can display statistics for dropped (or, on passively deployed devices, 
would have dropped) intrusion events, all intrusion events, or both. Note that you must enable local event 
storage or the widget will not have any data to display. Note also that the total rate represented by 

 

does not include the dropped event rate.

On the Defense Center, but not managed devices, you can configure the widget to display intrusion 
events with dropped/would have dropped packets and different impacts by modifying the widget 
preferences. You can display dropped and would have dropped events on Defense Centers and devices. 
The following graphic shows the Defense Center version of the widget preferences.

In the widget preferences, you can:

on a Defense Center, select one or more 

check boxes to display separate graphs for events 

with dropped packets, would have dropped packets, or specific impacts; select 

to display an 

additional graph for all intrusion events, regardless of impact or rule state; see 

 for more information

select 

to choose 

 or 

select 

 to choose 

 (incremental) or 

 (factor of ten) scale