38. Reports » Devices » Filters¶
Clicking on a Filter anywhere in the Console opens a tab with specific data. The tab has sub-tabs at the bottom. Each sub-tab shares these common toolbar fields:
● Filters – Select the Filter of interest, or All. Administrators can limit which Filters guests can access● Time Range – Select a predefined range, or Custom… for a specific time interval
38.1. Filter Dashboard¶
This sub-tab displays widgets using data collected by Filters. Its configuration is global (not specific to just one Filter), so any changes here are also visible in other Filter Dashboards. The Reports » Dashboards chapter describes general dashboard operations.
Filter widget configuration is explained in the following paragraphs.
38.2. Filter Graphs¶
In this sub-tab you can view a variety of Filter-related histograms for the selected Filter(s):
● Data Units – Select one or more data units:• Most Used – Frequently used data units• Anomalies – Anomalies mitigated by the chosen Filter(s)• Filtering Rules – Filtering rules detected by the selected Filter(s)• SW Firewall Rules – Filtering rules enforced by Netfilter• HW Firewall Rules – Filtering rules enforced by NIC hardware filters• Source IPs – Number of unique IP addresses sending traffic to the attacked destination(s)• CPU% – Maximum CPU usage by the Filter(s)• Used RAM – Amount of RAM used by the Filter(s)• Filtered Packets – Packets reported as blocked• Filtered Bits – Bits reported as blocked• Dropped Packets – Rate of packets dropped by the capturing engine of the Filter(s)• Received Packets – Rate of packets received by the Filter(s)• Packets/s – Packets per second analyzed by the Filter(s)• Bits/s – Bit throughput analyzed by the Filter(s)• Filtering Rules – Number of filtering rules found per rule type• Total Excepted Rules – Whitelisted (excepted) filtering rules● Size – Choose a preset dimension or enter a custom size as “<X> x <Y>” where <X> and <Y> are the horizontal/vertical pixel counts● Title – Enter your own text as the title, or select one of these options:• Auto – Automatically generated title• None – No title● Legend – Select how detailed the legend should be● Consolidation – Graph consolidation reduces data resolution by averaging, minimizing, or maximizing values over fixed time intervals, optimizing visualization while maintaining overall trends:• MAXIMUM – Shows peak spikes• AVERAGE – Displays average values• MINIMUM – Focuses on lower values● Grouping• Filters – Select this to produce a single graph for all chosen Filters● Stacking• Filters – Choose this option to view summed, stacked values for multiple Filters
38.3. Filter Events¶
In this sub-tab, you can view events generated by the chosen Filter(s) during the specified time interval.
38.4. Filter Instances¶
Lists statistics for each Filter instance.
38.5. Filtering Rules Archive¶
Shows filtering rules identified by the selected Filter(s) over the specified time range. Many columns match those in Reports » Tools » Anomalies.
38.6. Filtering Rules Distribution¶
Generates pie charts of various filtering rule–related statistics.