<< PREVIOUS  NEXT >>

INCIDENTS

1. Navigate to Incidents under Monitor in the left navigation pane

   

2. The Incidents page displays information of all threats and attacks

   

3. Click on the incident to view more information

   

   1. The tabs - Incident Details, Protection Actions and Extended Properties - provide information about the incident

      

   2. The incident can also be added as an exception (if such incidents are not desired), acknowledged, archived OR exported in Microsoft Excel and PDF formats

      

4. Select all the required incidents, expand ACKNOWLEDGED

   1. Acknowledge only the selected incidents or all the listed incidents

   2. Once acknowledged, the incident will not be displayed on the page

      

5. Select all the required incidents, expand ARCHIVE

   1. Archive only the selected incidents or all the listed incidents

      

6. Each Incident ID depicts the below information

   

7. The severity depicts whether the entry is an attack (red), a threat (orange) or a notification (blue)

   

8. A basic or an advanced search can be performed on the displayed incidents

   

9. Incidents can also be filtered based on the criteria depicted below

   

10. All the Timestamp values can be viewed in one of the three time zones – UTC Time, Host (Probe) Time and Local (browser) Time

    1. To set the time zone, click Incident Settings

       

    2. Select the required time zone

       

    3. Click APPLY

       

    4. The time zone is configurable for each CMS user. Once selected, the time values are displayed in same time zone until modified

    5. By default, Local Time is set as the time zone for each newly created CMS user

<< PREVIOUS  NEXT >>