Traditional Reports are based on pre-defined conditions and provide information on the alerts generated by your Sensor. The generated alert information can include source and destination IP of the attack, time when the attack occurred, Sensor that detected the attack, and so forth. The various IPS Reports provide concentrated views according to the specific parameters of each report. Each report lists alerts from most to least common detected. All IPS Reports can be viewed in either HTML or PDF or CSV format. The Executive Summary and Top N reports can also be viewed in bar graph or pie chart format.
You can also schedule the IPS Reports and the Audit report so that they are automatically generated at the specified times.
.jpg "Traditional_reports_1.jpg")
The available IPS Reports are:
Big Movers Report — Provides a comparison view of attacks that occurred in recent time interval with those that occurred in a pervious time interval.
Executive Summary Report — Provides a summary view of selected alert data presented in a variety of tables, graphs, and charts.
Reconnaissance Attacks Report — Presents reconnaissance alerts during a specified time.
Templates — Enables you to create custom IPS report templates that you can run on-demand at a later time, as well as manage the report templates you created for Scheduled Reports.
Top N Attacks Report — Lists a specific number of alerts in order of frequency for one of four defining categories (for example, source IP address, most common attacks).
Trend Analysis Report — Presents alert data based on common trends per specified frequency (for example, number of high severity alerts per hour for one day).
User-Defined Report — Presents alerts based on a variety of defining parameters including interface, application protocol, and direction of alert.
This figure shows the difference between the admin domain filter available in the left pane, and the admin domain filter available for some reports.
.jpg "11_1M6_customreports_2.jpg")
1 — This admin domain filter has no impact on the reports generated.
2 — This is the admin domain filter that you can use to generate the report based on the admin domain selected.