Juniper SECURITY THREAT RESPONSE MANAGER 2008.2 R2 - LOG MANAGEMENT ADMINISTRATION GUIDE REV 1, Руководство пользователя

Страница: 114 / 246

STRM Users Guide
108 I
NVESTIGATING
O
FFENSES
Hint: The top of the panel displays the navigation trail to the current view. If you
wish to return to a previously viewed panel, click the panel name on the navigation
trail.
The Local Targets details panel provides the following information:
Table 5-18 Targets Details Panel
Parameter Description
Magnitude Specifies the relative importance of attacks on the target. The
magnitude bar provides a visual representation of all the
correlated variables of the target. Variables include the
vulnerability assessment risk and threat under.
•
Vulnerability Risk - The vulnerability assessment risk level
(0 to 10) for the asset where 0 is the lowest and 10 is the
highest. This is a weighted value against all other hosts in
your deployment.
•
Threat Under - The value applied to the threat a target is
under over time. This is calculated based on the average
weighted value of the threat posing over time.
Point your mouse to the magnitude bar to display values and the
calculated magnitude.
IP/DNS Name Specifies the IP address of the target. If DNS lookups is enabled
in the STRM Administration Console, you can view the DNS
name by pointing your mouse over the IP address or asset
name. For more information, see the STRM Administration
Guide .
Offense(s) Specifies the name of the offense. To view additional information
on the offense, click the name or term that appears.
If the offense is a single source, the name of the offense
appears. You can click the name to view the offense details. If
multiple offenses are responsible for this attacker, the term
Multiple appears. Click Multiple for a table of offenses to appear
at the bottom of the panel.