Filter
Top Products
126
McAfee
®
Host Intrusion Prevention 6.1 Product Guide Maintenance
Running reports
8
Summary information and details
After a report is generated, you view summary information, as determined by the filter,
if any, that you have set. From the summary information you can drill down to one or
two levels for detailed information, all in the same report.
Report content control
You can control how much report information is visible to different users; for example,
global administrators or site administrators. Site administrators and site reviewers can
only report on those client systems in sites where they have permissions. Report
information is also controlled by applying filters.
Host Intrusion Prevention reports
The Host Intrusion Prevention report templates include:
:
IPS Events Summary by Signature
Use this report to view IPS events per signature. Details include:
Filters on signature, recording time, severity level, OS user, reaction, process, and
source IP.
IPS Reports Firewall Reports
IPS Events Summary by Signature
IPS Event Summary by Target
Network Intrusion Summary by Source
IP
Top 10 Attacked Nodes for IPS
Top 10 Triggered Signatures
Blocked Application Summary
Top 10 Blocked Applications
Failed Quarantine Updates
Initial View Level 1 Drill Down Level 2 Drill Down
Signature Name >
Event Count
Signature Name
Process >
Count
OS User
Reaction
Node name
Source IP
Incident Time
Recording Time
Severity Level
Event description
Advanced details