FTD Dashboard Widgets

The FTD dashboard displays predefined widgets that can provide you with at-a-glance views of the current system status. These views include:

• Data about the events collected and generated by Firewall Threat Defense devices managed FMC.

• Information about the status and the overall health of the devices in your deployment.

The Top Intrusion Rules widget displays counts of the intrusion events that have occurred over the specified time range and are organized by priority. These counts include statistics on intrusion events with dropped packets and different impacts. The generated list is scrollable.

The Top Intrusion Attackers widget displays counts of intrusion events for the top attacking host IP addresses (causing those events) on your monitored network.

The Top Intrusion Targets widget displays counts of intrusion events for the top target host IP addresses (targeted in the connections causing those events) on your monitored network.

The Top Malware Signatures widget displays counts of the top malware signatures detected in the network traffic for top file-sending host IP addresses.

The Top Malware Senders widget displays counts of the top malware threats that are detected in the network traffic for top file-sending host IP addresses.

The Top Malware Receivers widget displays counts of the top malware threats that are detected in the network traffic for all top file-receiving host IP addresses.

The Malware Events by Disposition widget displays counts of all disposition of malware events that are generated when the managed device detects a file containing malware.

The Network Activity widget displays all ingress and egress data rate that is based on information from the connection events.

The Event Activity widget displays counts of events that have occurred in the last hour and the total number of each event type that is available in the database.

The Access Control Actions widget displays counts of events that are logged based on the allowed or blocked access control actions for each event. If you hover on the pie chart, you can view the percentage of the allowed and blocked actions.

The Top Access Control Policies widget displays counts of top access control policies generating events.

The Top Access Control Rules widget displays the top five counts of the access control rules that are used for each event. These counts can be sorted by bytes or events.

The Top Devices widget displays counts of events per devices. These count can be sorted by bytes or events.

The Top Users widget displays a list of users on your monitored network that are associated with the highest intrusion event counts. It draws data primarily from the intrusion detection (IDS) User Statistics and Intrusion Events tables. It displays authoritative user data.

The Top Users by Blocked Connections widget displays users who have the highest number of blocked connection events associated with them in your monitored network.

The Top Devices with Health Alerts widget displays the current compiled health status for Security Cloud Control-managed Firewall Threat Defense devices.

The Top Loaded Devices widget displays a list of Secure Firewall Threat Defense devices along with the CPU usage information.

The Top Web Applications widget displays the web applications that are associated with the highest number of connection events in your monitored network. You can sort this list based on bytes or event count.

The Top Client Applications widget displays the most used client applications in your monitored network. You can sort this list based on bytes or event count.

The Top Web Applications widget displays the top web applications that are associated with blocked connection events and the count of blocked connection events in your monitored network.