Cisco Cisco FirePOWER Appliance 8390
4-31
FireSIGHT System User Guide
Chapter 4 Using the Context Explorer
Understanding the Context Explorer
Hover your pointer over any part of the graph to view more detailed information. Click any part of the
graph to drill down on that information.
graph to drill down on that information.
Note
If you filter on intrusion event information, the Traffic by URL Category graph is hidden.
Note that you must have a URL Filtering license and enable URL Filtering for URL filtering graphs to
include URL category and reputation data. Note also that neither the DC500 Defense Center nor Series 2
devices support URL filtering by reputation and category, so the DC500 Defense Center cannot display
this data and Series 2 devices do not detect it. See
include URL category and reputation data. Note also that neither the DC500 Defense Center nor Series 2
devices support URL filtering by reputation and category, so the DC500 Defense Center cannot display
this data and Series 2 devices do not detect it. See
.
This graph draws data primarily from the URL Statistics and Connection Events tables.
Viewing the Traffic by URL Reputation Graph
License:
URL Filtering
Supported Devices:
feature dependent
Supported Defense Centers:
feature dependent
The Traffic by URL Reputation graph, in bar form, displays counts of network traffic (in kilobytes per
second) and unique connections for the most requested URL reputation groups (such as
second) and unique connections for the most requested URL reputation groups (such as
Well known
or
Benign sites with security risks
) on your monitored network. For each URL reputation listed, blue
bars represent traffic data and red bars represent connection data.