This section provides information about terminology used in the Network Security user interfaces.
In the Web UI, Victim/Attacker is used in table views (such as the Alerts page and IPS Events page) and in headers in detail views (such as the Alert Details page). Source/Destination fields containing packet data collected in PCAP files are included in detail views.
Note
In email notifications and downloaded XML files, the values in the source and destination fields are switched. For example, the source IP address in the Web UI is shown as the destination IP address in email notifications and downloaded XML files.