To view a DoS event, you must have a DoS protection profile assigned to a protected object, or have enabled device protection, and a DoS attack must have occurred.
With AFM DoS reporting, you can view DoS attacks by type and duration. The DoS reporting page is divided into three sections: a time selector, a charts area, and a dimensions area. The three areas show all DoS events within a selected time period. When you select a specific DoS event in one area, all three areas highlight that specific event.
-
On the Main tab, click
.
-
In the time selector area at the top of the page, click Last Hour to review the available time filters.
You can move the slider bars to the left and right of the time scale to further filter the time period.
-
Hover over an attack to view the attack summary, or click the attack to highlight the attack in the Attacks area and the Dimentions area.
The chart's Attack Duration area shows the time and severity of each DoS attack.
-
Familiarize yourself with these chart actions:
-
Move the cursor over a specific graph area to view all of the events that occurred during that specific time.
-
Drag the cursor over a graph area and click the + icon to view all of the events that occurred during that specific time range.
-
Use the chart's Attacks area to view the charts labeled # of Attacks, the # of Attacks per Protocol, and also to select and review specific attacks from Attack ID list.
-
Click a specifc attack ID in the Attack ID list to show statistical information about the attack in the dimensions area to the far right.
-
Click the chart icon (Open in Analysis Page) to show an in-depth resource analysis of the attack.
-
At the top of the page, click Custom Page to open a new screen where you can create a customized DoS report that can be exported in a PDF format.
Next, you might want to view IP Intelligence reports.