Monitor Next-Generation Firewall Sites and Devices

After configuring a next-generation firewall site, you can perform the following monitoring tasks:

• On the Site-Name page (Resources > Site Management > Site-Name), you can view general information about the site, policies, and devices.

  For more information, see Managing a Single Site in the CSO Customer Portal User Guide (available on the CSO Documentation page).

• On the Device-Name page (Resources > Devices > Device-Name), you can view general information about the device, view recent alerts and alarms, and view and manage interfaces, routing instances, and zones.

  For more information, see Managing a Single CPE Device in the CSO Customer Portal User Guide.

• On the Generated Alerts page (Monitor > Alerts), you can view the alerts generated by the next-generation firewall devices.

  For more information, see About the Generated Alerts Page in the CSO Customer Portal User Guide.

• On the Alarms page (Monitor > Alarms), you can view the alarms raised by the next-generation firewall devices.

  For more information, see About the Alarms Page in the CSO Customer Portal User Guide.

• On the Traffic Logs page (Monitoring > Security Events > Traffic Logs), you can view the traffic logs generated by next-generation firewall devices.

  For more information, see About the Traffic Logs Page in the CSO Customer Portal User Guide.

• On the All Security Events page (Monitor > Security Events > All Events), you can view a summary and detailed view of the security events in your network.

  For more information, see About the All Security Events Page in the CSO Customer Portal User Guide.

• On the Firewall Events page (Monitor > Security Events > Firewall), you can view a summary and detailed view of the firewall-related security events.

  For more information, see About the Firewall Events Page in the CSO Customer Portal User Guide.

• On the Web Filtering Events page (Monitor > Security Events > Web Filtering), you can view a summary and detailed view of the security events related to Web filtering.

  For more information, see About the Web Filtering Events Page in the CSO Customer Portal User Guide.

• On the IPsec VPN Events page (Monitor > Security Events > IPsec VPNs), you can view a summary and detailed view of the security events related to IPsec VPNs.

  For more information, see About the IPsec VPNs Events Page in the CSO Customer Portal User Guide.

• On the Content Filtering Events page (Monitor > Security Events > Content Filtering), you can view a summary and detailed view of the security events related to content filtering.

  For more information, see About the Content Filtering Events Page in the CSO Customer Portal User Guide.

• On the Antispam Events page (Monitor > Security Events > Antispam), you can view a summary and detailed view of the security events related to spam.

  For more information, see About the Antispam Events Page in the CSO Customer Portal User Guide.

• On the Antivirus Events page (Monitor > Security Events > Antivirus), you can view a summary and detailed view of the security events related to viruses.

  For more information, see About the Antivirus Events Page in the CSO Customer Portal User Guide.

• On the IPS Events page (Monitor > Security Events > IPS), you can view a summary and detailed view of the security events related to IPS.

  For more information, see About the IPS Events Page in the CSO Customer Portal User Guide.

• On the Screen Events page (Monitor > Security Events > Screen), you can view a summary and detailed view screen events that occur as a result of the screen options configured on next-generation firewall devices.

  For more information, see About the Screen Events Page in the CSO Customer Portal User Guide.

• On the Application Visibility page (Monitor > Application Visibility, you can security management information such as the type, bandwidth consumption, and behavior of applications running on your network, which you can use to identify application-level threats to your network.

  For more information, see About the Application Visibility Page in the CSO Customer Portal User Guide.

• On the User Visibility page (Monitor > User Visibility), you can view information about the devices (such as top 50 devices accessing high bandwidth-consuming applications and establishing higher number of sessions) on your network.

  For more information, see About the User Visibility Page in the CSO Customer Portal User Guide.

• On the Threat Map (Live) page (Monitor > Threat Map (Live), you can visualize incoming and outgoing threats between geographic regions, view blocked and allowed threat events and so on.

  For more information, see About the Threats Map (Live) Page in the CSO Customer Portal User Guide.

• On the Security Report Definitions page (Reports > Report Definitions), you can create custom report definitions or use predefined report definitions to generate log, bandwidth, and application and network risk (ANR) reports.

  For more information, see About the Report Definitions Page in the CSO Customer Portal User Guide.