Configuring a User-defined Stat-set

A user-defined stat-set provides a more flexible approach to view the statistics. You can view the statistics as needed. The statistical data may vary from the data types you have selected.

The table below shows the IP type-based statisticical information:

Direction
Condition
Data type
Traffic
Session
Ramp-up rate
Virus attack count
 AD attack count
Intrusion count
 URL hit count Keyword block count Application block count
No direction Initiator Statistics on the traffic of the initiator's IP Statistics on the session number of the initiator's IP Statistics on the new sessions of the initiator's IP Statistics on the virus attack count of the specified IPs Statistics on the AD attack count of the specified IPs Statistics on the intrusion count of the specified IPs Statistics on the URL hit count of the specified IPs Statistics on the keyword block count of the specified IPs Statistics on the application block count of the specified IPs
Responder Statistics on the traffic of the responder's IP Statistics on the session number of the responder's IP Statistics on the new sessions of the responder's IP
Belong to zone Statistics on the traffic of an IP that belongs to a specific security zone Statistics on the session number of an IP that belongs to a specific security zone Statistics on the new sessions of an IP that belongs to a specific security zone
Not belong to zone Statistics on the traffic of an IP that does not belong to a specific security zone Statistics on the session number of an IP that does not belong to a specific security zone Statistics on the new sessions of an IP that does not belong to a specific security zone
Belong to interface Statistics on the traffic of an IP that belongs to a specific interface Statistics on the session number of an IP that belongs to a specific interface Statistics on the new sessions of an IP that belongs to a specific interface
Not belong to interface Statistics on the traffic of an IP that does not belong to a specific interface Statistics on the session number of an IP that does not belong to a specific interface Statistics on the new sessions of an IP that does not belong to a specific interface
Bi-directional Initiator Statistics on the uplink and downlink traffic of the initiator's IP Statistics on the number of received and sent sessions of the initiator's IP Statistics on the new received and sent sessions of the initiator's IP
Responder Statistics on the uplink and downlink traffic of the responder's IP Statistics on the number of received and sent sessions of the responder's IP Statistics on the new received and sent sessions of the responder's IP
Belong to zone Statistics on the uplink and downlink traffic of an IP that belongs to a specific security zone Statistics on the number of received and sent sessions of an IP that belongs to a specific security zone Statistics on the new received and sent sessions of an IP that belongs to a specific security zone
Not belong to zone Statistics on the uplink and downlink traffic of an IP that does not belong to a specific security zone Statistics on the number of received and sent sessions of an IP that does not belong to a specific security zone Statistics on the new received and sent sessions of an IP that does not belong to a specific security zone
Belong to interface Statistics on the uplink and downlink traffic of an IP that belongs to a specific interface Statistics on the number of received and sent sessions of an IP that belongs to a specific interface Statistics on the new received and sent sessions of an IP that belongs to a specific interface
Not belong to interface Statistics on the uplink and downlink traffic of an IP that does not belong to a specific interface Statistics on the number of received and sent sessions of an IP that does not belong to a specific interface Statistics on the new received and sent sessions of an IP that does not belong to a specific interface

The table below shows the statisticical information based on interface, zone, application, virus, attack, user, ID, URL and URL category:

Group by
Direction
Data type
Traffic
Session
Ramp-up rate
Virus attack count
 AD attack count
Intrusion count
 URL hit count Keyword block count Application block count
Interface No direction Statistics on the traffic of the specified interfaces Statistics on the session number of the specified interfaces Statistics on the new sessions of the specified interfaces Statistics on the virus attack count of the specified interfaces Statistics on the AD attack count of the specified interfaces Statistics on the intrusion count of the specified interfaces Statistics on the URL hit count of the specified interfaces N/A N/A
Bi-directional Statistics on the uplink and downlink traffic of the specified interfaces Statistics on the number of received and sent sessions of the specified interfaces Statistics on the new received and sent sessions of the specified interfaces
Zone No direction Statistics on the traffic of the specified security zones Statistics on the session number of the specified security zones Statistics on the new sessions of the specified security zones Statistics on the virus attack count of the specified security zones Statistics on the AD attack count of the specified security zones Statistics on the intrusion count of the specified security zones Statistics on the URL hit count of the specified security zones N/A N/A
Bi-directional Statistics on the uplink and downlink traffic of the specified security zones Statistics on the number of received and sent sessions of the specified security zones Statistics on the new received and sent sessions of the specified security zones
Application N/A Statistics on the traffic of the specified applications Statistics on the session number of the specified applications Statistics on the new sessions of the specified applications Statistics on the virus attack count of the specified applications N/A Statistics on the intrusion count of the specified applications N/A N/A Statistics on the block count of the specified applications
Virus N/A N/A N/A N/A Statistics on the virus number N/A N/A N/A N/A N/A
Attack N/A N/A N/A N/A N/A Statistics on the AD attack count of the specified attacks N/A N/A N/A N/A
User No direction Statistics on the traffic of the specified users Statistics on the session number of the specified users Statistics on the new sessions of the specified users N/A N/A Statistics on the intrusion count of the specified users Statistics on the URL hit count of the specified users Statistics on the keyword block count of the specified users Statistics on the application block count of the specified users
Bi-directional Statistics on the uplink and downlink traffic of the specified users
ID N/A N/A N/A N/A N/A N/A Statistics on the intrusion count of the specified IDs N/A N/A N/A
URL N/A N/A N/A N/A N/A N/A N/A Statistics on the hit count of the specified URLs N/A N/A
URL category N/A N/A N/A N/A N/A N/A N/A Statistics on the hit count of the specified URL categories N/A N/A
Keyword N/A N/A N/A N/A N/A N/A N/A N/A Statistics on the block count of the specified keywords N/A
Block type N/A N/A N/A N/A N/A N/A N/A N/A Statistics on the keyword block count of the specified block types N/A

You can configure a filtering condition for the stat-set to gather statistics on the specified condition, such as statistics on the session number of the specified security zone, or on the traffic of the specified IP. All the filtering conditions supported by system Stat-set are listed in the table below:

Type Description
filter zone Data is filtered by security zone.
filter zone zone-name ingress Data is filtered by ingress security zone.
filter zone zone-name egress Data is filtered by egress security zone.
filter interface Data is filtered by interface.
filter interface if-name ingress Data is filtered by ingress interface.
filter interface if-name egress Data is filtered by egress interface.
filter service Data is filtered by service.
filter ip Data is filtered by address entry.
filter ip add-entry source Data is filtered by source address (address entry).
filter ip add-entry destination Data is filtered by destination address (address entry).
filter ip A.B.C.D/M Data is filtered by IP.
filter ip A.B.C.D/M source Data is filtered by source IP.
filter ip A.B.C.D/M destination Data is filtered by destination IP.
filter role Data is filtered by role.
filter user Data is filtered by user.
filter user-group Data is filtered by user group.
filter attack-type Data is filtered by attack type.
filter severity Data is filtered by signature severity.

Creating a User-defined Stat-set

To create a user-defined stat-set, take the following steps:

  1. On the Navigation pane, click Monitor > User-defined > Configuring User-defined Stat-set to visit the User-defined Stat-set page.
  2. Click New.
  3. In the User-defined Stat-set Configuration dialog, type the name for the stat-set into the Name box.
  4. Select an appropriate data type from the Data type list.
  5. Select an appropriate grouping method from the Group by list.
  6. To configure a filtering condition, click Option. In the Advanced dialog, select a filter condition from the Filter drop-down list. For more details about this option, see the filtering condition table above.
  7. Click OK to save your settings and return to the User-defined Stat-set Configuration dialog. The configured stat-set will be displayed under the User-defined section on the Navigation pane.

Note: When configuring a stat-set:

Editing a User-defined Stat-set

To edit a user-defined stat-set, take the following steps:

  1. On the Navigation pane, click Monitor > User-defined > Configuring User-defined Stat-set to visit the User-defined Stat-set page.
  2. Select the stat-set you want to edit from the stat-set list below, and click Edit. In the User-defined Stat-set Configuration dialog, modify according to your need.
  3. Click OK to save your changes.

Deleting a User-defined Stat-set

To delete a user-defined stat-set, take the following steps:

  1. On the Navigation pane, click Monitor > User-defined > Configuring User-defined Stat-set to visit the User-defined Stat-set page.
  2. Select the stat-set you want to delete from the stat-set list below, and click Delete.

Viewing User-defined Stat-set Statistics

On the Navigation pane, click Monitor > User-defined, and then select the stat-set you want to view. The statistical results wil be displayed in the main window on the right. System displays the statistical result from multiple aspects in forms of curve chart, pie chart, bar chart and list, etc. Besides, you can also view specified historic statistics by selecting a period from the statistic period drop-down list.

Related Topics:

Stat-set Configuration Examples