Руководство Пользователя для Cisco Cisco Web Security Appliance S670
23-31
Cisco IronPort AsyncOS 7.1 for Web User Guide
OL-23207-01
Chapter 23 Web Security Appliance Reports
L4 Traffic Monitor Data Page
describes the information on the Web Reputation Filters page.
L4 Traffic Monitor Data Page
The Reporting> L4 Traffic Monitor page is a is a security-related reporting page
that displays information about malware ports and malware sites that the L4
Traffic Monitor has detected during the specified time range.
that displays information about malware ports and malware sites that the L4
Traffic Monitor has detected during the specified time range.
The L4 Traffic Monitor listens to network traffic that comes in over all ports on
the appliance and matches domain names, and IP addresses against entries in its
own database tables to determine whether to allow incoming and outgoing traffic.
the appliance and matches domain names, and IP addresses against entries in its
own database tables to determine whether to allow incoming and outgoing traffic.
The upper part of the report displays the number of connections for each of the
top malware ports and web sites. The lower part of the report displays malware
ports and sites detected.
top malware ports and web sites. The lower part of the report displays malware
ports and sites detected.
Table 23-10
Web Reputation Filters Report Page Components
Section
Description
Time Range (drop-down list)
A menu that allows to choose the time range of the data contained
in the report. For more information, see the
in the report. For more information, see the
.
Web Reputation Actions (Trend)
This section, in graph format, displays the total number of web
reputation actions (vertical) against the time specified (horizontal
timeline). From this you can see potential trends over time for
web reputation actions.
reputation actions (vertical) against the time specified (horizontal
timeline). From this you can see potential trends over time for
web reputation actions.
Web Reputation Actions (Volume)
This section displays the web reputation action volume in
percentages by transactions.
percentages by transactions.
Web Reputation Threat Types by
Blocked Transactions
Blocked Transactions
This section displays the threat types that were blocked due to a
low reputation score.
low reputation score.
Web Reputation Threat Types by
Scanned Further Transactions
Scanned Further Transactions
This section displays the threat types that resulted in a reputation
score that indicated to scan the transaction. It shows both
monitored and blocked transactions.
score that indicated to scan the transaction. It shows both
monitored and blocked transactions.
Web Reputation Actions
(Breakdown by Score)
(Breakdown by Score)
This interactive table displays the web reputation scores broken
down for each action.
down for each action.