Cisco Cisco Firepower 4120 Security Appliance
Table 140: Risk Levels (cont.)
Risk Level
Description
Medium
The risk may pose a threat to normal service operation, but is not likely to cause complete
service outage, remote code execution, or unauthorized access.
High
The risk is very likely to pose a threat to normal service availability, and may cause complete
service outage, remote code execution, or unauthorized access.
Using the Dashboard Views for Real-Time Security
Monitoring
This section includes the following topics:
•
Configuring the Display Parameters of a Dashboard View, page 191
•
Using the Current Attacks Table, page 192
•
Using the Ongoing Attacks Monitor, page 196
•
Attack Details, page 197
•
Sampled Data Tab, page 205
•
Viewing Real-Time Traffic Reports, page 206
•
Viewing Traffic Utilization Statistics, page 206
Use a Dashboard View in the Security Monitoring perspective to analyze activity and security events in the network,
identify security trends, and analyze risks.
You can view information for individual devices, all devices in a site, or all devices in the network. The dashboard
You can view information for individual devices, all devices in a site, or all devices in the network. The dashboard
monitoring display automatically refreshes providing ongoing real-time analysis of the system.
The Dashboard View node comprises the following tabs, which display the same summary information:
The Dashboard View node comprises the following tabs, which display the same summary information:
•
Current Attacks Table
—
which is a table display (see
Figure 28 - Current Attacks Table, page 193
).
•
Ongoing Attacks Monitor
—
which includes a graphical, chart display (see
Figure 29 - Ongoing Attacks
Monitor, page 197
).
The Scope and other display parameters that you configure apply to the Current Attacks Table and to the Ongoing
Attacks Monitor
Attacks Monitor
. For more information, see
Configuring the Display Parameters of a Dashboard View, page 191
.
When you double-click an attack in the Current Attacks Table or Ongoing Attacks Monitor, APSolute Vision
displays the details in an Attack Details tab. There, you can display the Sampled Data dialog box for the all attack
types that support sampled data.
By default, the display of the Dashboard View refreshes every 15 seconds. Administrators can configure the
By default, the display of the Dashboard View refreshes every 15 seconds. Administrators can configure the
refresh rate (APSolute Vision Settings view System perspective, General Settings > Monitoring > Polling
Interval for Reports
Interval for Reports
).
© 2016 Cisco | Radware. All rights reserved. This document is Cisco Public.
Page 196 of 281