Enterasys Intrusion Prevention System, Руководство по отчетности

Страница: 34 / 122

The Tabbed Panel System Dashboard
2-8 Enterasys IPS Analysis and Reporting Guide
Status Message Status messages received from the sensor. Refer to Table 2-4 on
page 2-6 for more information.
Operating System Type of operating system of the sensor.
Type Type of sensor: IDS, IPS, or Host.
Sensor Uptime How long the sensor process has been running.
Last Heartbeat On Time of the last heartbeat event received via the Event Channel.
If the cell is yellow and contains a warning icon, the last heartbeat
event received is old, as shown by the time in the field.
Last Deployed On The date and time of the last deployment of this sensor.
Event Rate (per sec) Total events processed by the sensor.
Packets Read (pps) Packets read by the Network Sensor that were not dropped (in
packets per second). The bits from these packets contribute to the
bandwidth license measurement (see Bits Read (Mbps) below.)
Packets Inspected (pps) Packets that are read in successfully and sent through the
inspection process. Expressed in packets per second.
Packets Filtered (pps) Packets that are read in successfully, but are filtered out by an
application filter statement or because they are of a protocol type
that Enterasys IPS does not know how to inspect. Expressed in
packets per second.
Packets Blocked (pps) In an in-line IPS deployment, the packets that are blocked due to
either intrusion prevention rules or a black list rule. Expressed in
packets per second.
Packets White-listed (pps) In an in-line IPS deployment, the packets that were read in
successfully and transmitted without inspection due to a white list
rule. Expressed in packets per second.
Bits Read (Mbps) Number of bits in packets read by the sensor that were not
dropped. Expressed in megabits per second.
This value is compared with the license bandwidth limit to
determine if the bandwidth limit has been exceeded.
Bits Inspected (Mbps) Number of bits in packets that were read in successfully and sent
through the inspection process. Expressed in megabits per
second.
Bits Filtered (Mbps) Number of bits in packets that were read in successfully but were
filtered out. Expressed in megabits per second.
Bits Blocked (Mbps) Number of bits in the packets that were blocked. Expressed in
megabits per second.
Bits White-listed (Mbps) Number of bits in the packets that were read in successfully and
transmitted without inspection. Expressed in megabits per second.
CPU Usage % Percent of CPU used by the sensor process.
Memory Total (MB) Total memory available on host system.
Memory Used (MB, %) Memory used by sensor process, expressed in megabytes and in
percentage of total memory available.
Table 2-5 Sensors Tab Columns (Continued)
Column Header Description