Cisco Cisco FirePOWER Appliance 7120
3-27
FireSIGHT System User Guide
Chapter 3 Using Dashboards
Understanding the Predefined Widgets
Understanding the Intrusion Events Widget
License:
Protection
The Intrusion Events widget shows the intrusion events that occurred over the dashboard time range,
organized by priority. This includes statistics on intrusion events with dropped packets and different
impacts. This widget appears by default on the Intrusion Events tab of the Summary Dashboard.
organized by priority. This includes statistics on intrusion events with dropped packets and different
impacts. This widget appears by default on the Intrusion Events tab of the Summary Dashboard.
On managed devices, the widget can display statistics for dropped (or, on passively deployed devices,
would have dropped) intrusion events, all intrusion events, or both. Note that you must enable local event
storage or the widget will not have any data to display. Note also that the total rate represented by
would have dropped) intrusion events, all intrusion events, or both. Note that you must enable local event
storage or the widget will not have any data to display. Note also that the total rate represented by
All
does not include the dropped event rate.
On the Defense Center, but not managed devices, you can configure the widget to display intrusion
events with dropped/would have dropped packets and different impacts by modifying the widget
preferences. You can display dropped and would have dropped events on Defense Centers and devices.
The following graphic shows the Defense Center version of the widget preferences.
events with dropped/would have dropped packets and different impacts by modifying the widget
preferences. You can display dropped and would have dropped events on Defense Centers and devices.
The following graphic shows the Defense Center version of the widget preferences.
In the widget preferences, you can:
•
on a Defense Center, select one or more
Event Flags
check boxes to display separate graphs for events
with dropped packets, would have dropped packets, or specific impacts; select
All
to display an
additional graph for all intrusion events, regardless of impact or rule state; see
for more information
•
select
Show
to choose
Average Events Per Second
or
Total Events
•
select
Vertical Scale
to choose
Linear
(incremental) or
Logarithmic
(factor of ten) scale