38. Reports » Devices » Filters¶
Clicking on a Filter anywhere in Console opens a tab with specific information. The tab includes a few sub-tabs located at the lower side of the window. Every sub-tab shares the following common toolbar fields:
● Filters – Select the Filters you are interested in, or select All. Administrators can restrict which Filters are accessible by guest accounts● Time Range – Select a predefined time range, or select Custom… to enter a specific time interval
38.1. Filter Dashboard¶
In this sub-tab you can view the most relevant data collected by Filters in the form of widgets. The configuration of the Filter Dashboard does not apply to a particular Filter, so the changes you make here are visible for other Filter Dashboards as well. The operation of dashboards is described in the Reports » Dashboards chapter.
The configuration of Filter widgets is outlined in the following paragraphs.
38.2. Filter Graphs¶
In this sub-tab you can view a variety of Filter-related histograms for the selected Filter(s):
● Data Units – Select one or more data units:• Most Used – Frequently-used data units• Anomalies – Anomalies mitigated by the selected Filter(s)• Filtering Rules – Filtering rules detected by the selected Filter(s)• SW Firewall Rules – Filtering rules applied by Netfilter• HW Firewall Rules – Filtering rules applied by the Hardware Offload functionality of the NIC• Source IPs – Unique IP addresses that sent traffic to the attacked destination(s)• CPU% – Maximum percentage of CPU resources used by the selected Filter(s)• Used RAM – Amount of RAM used by the selected Filter(s)• Filtered Packets – How many packets were reported as blocked• Filtered Bits – How many bits were reported as blocked• Dropped Packets – Rate of packets dropped by the packet capturing engine of the selected Filter(s)• Received Packets – Rate of packets received by the selected Filter(s)• Packets/s – Rate of packets analyzed by the selected Filter(s)• Bits/s – Throughput analyzed by the selected Filter(s)• Filtering Rules – Filtering rules found for each filtering rule type• Total Excepted Rules – Whitelisted filtering rules● Size – Select a predefined graph dimension or enter a custom one in a “<X> x <Y>” format, where <X> and <Y> are the X-axis and Y-axis pixels● Title – Graphs have an automatically-generated title for Auto, no title for None, or you can enter your own text to be rendered as a title● Legend – Select the level of detail for the graph legend● Consolidation – If you are interested in spikes, choose the MAXIMUM aggregation type. If you are interested in average values, choose AVERAGE. If you are interested in low values, choose the MINIMUM aggregation type● Grouping• Filters – Select to generate a single graph for the selected Filters● Stacking• Filters – Select to view the summed up, stacked values for multiple Filters
38.3. Filter Events¶
In this sub-tab you can see the events generated by the selected Filter(s) during the specified time range.
38.4. Filter Instances¶
Lists statistics collected by each Filter instance.
38.5. Filtering Rules Archive¶
Lists filtering rules detected by the selected Filter(s) during the specified time range. Most fields are described in the Reports » Tools » Anomalies chapter.