With the new Enterprise Threat Protector (ETP) dashboard in Enterprise Center, you can create interactive widgets to view and track network traffic, events, and other activity across your organization. The dashboard allows an enterprise to define the graphical presentation of this data, giving administrators and report viewers the ease of viewing this data at a glance. This key information allows you to not only learn about the activity or user actions that generated events, but it also gives you the information you need to investigate data in ETP reports. The dashboard also provides information that enables you to remove threats or compromised machines from your network.
- DNS Events. Events detected by ETP intelligence, ETP Client, or Security Connector.
- HTTP Events. Events detected by ETP Proxy or an ETP Client configuration that forwards traffic to ETP Proxy.
- DNS Activity. DNS traffic that’s directed to ETP.
- HTTP Activity. HTTP traffic that’s directed to ETP Proxy.
- Blocked DNS. DNS events that are blocked as a result of an acceptable use policy.
- Blocked HTTP. HTTP events that are blocked as a result of an acceptable use policy.
After selecting the metric, you must select the dimension that’s used to group this data. For example, you can group event or activity data by domain, category, location, and more. For a complete list of dimensions that are currently available for the dashboard, see Dashboard dimensions.
- If you select more than one metric, you can select the data that you want to show in the graph. For example, in the widget that’s pictured, HTTP events are shown in a pie chart.
- To show aggregate values, you can select a circle graph, pie chart, or a horizontal bar graph.
- To show values based on time, you can select a line graph.
- You can customize the title that appears in a widget with a graphical view. For example, in the preceding graphic, the title “HTTP Events by Category” is a title that ETP generated for this widget based on the data and selected graph. However, you can change this title to better represent the data or purpose of this widget.
- The preview shows mock data until the widget is added to a dashboard.
The new dashboard makes it easy for you to reuse settings when creating a widget. You can copy the settings from another widget that you or another administrator created, or you can reuse the settings from a predefined widget. The dashboard includes a widget catalog that contains a number of specific widgets that are already configured for your convenience. For more information, see the Widget catalog.
- Clicking data in a widget leads you to a specific report where more detailed information is provided. For example, clicking threat events data leads you to the Threat Events report.
- Data is shown based on the data and time an administrator or report viewer selects for the dashboard. By default, the dashboard shows data from the last 24 hours.
In addition to creating a number of unique widgets, you can create different dashboards that contain the widgets you need for a specific view. For example, you can create a dashboard that contains events or activity exclusively related to DNS, while creating another dashboard that is focused on HTTP traffic and events. The new ETP dashboard in the Enterprise Center interface gives you the flexibility to design the dashboard that suits your needs as an administrator who must monitor data.