37
Copyright © 1990-2011 Norman ASA
Norman Network Protection
Administrator Guide
Administration and configuration | Incident statistics
Incident statistics
Malware stopped by Network Protection is always logged. The Incident Statistics View displays all
incidents in a structured manner.
Figure 31: Incident statistics details
Functions
The default view is the statistics for the current day. From the top right corner you can select a month,
or specify a date range you want to see statistics for. You can also select a specific date by only enter-
ing a date in the first field of the two data range fields, and then click submit. When selecting a month,
you can also choose a specific day by clicking the graph for the desired day.
Daily/Hourly incident histogram
The top graphs display the amount of traffic that has been stopped by the Network Protection applica-
tion.
Top 20 - Detected with signature
Displays the amount of malware stopped by the Network Protection application, both in numbers and
percent of total malware per malware type.
Top 20 – Detected with Sandbox
Displays the amount of malware stopped by the Network Protection application using the Norman
Sandbox, both in numbers and percent of total malware per Norman Sandbox category.
Top 20 - Malware senders
Displays an overview of computers with corresponding DNS names, if available, that have attempted
to send malware through the Network Protection application.
