H3C Technologies H3C SecCenter Firewall Manager - Manual (Page 52)

46
Firewall management
The Firewall Manager enables centralized management of firewall devices in the network, centralized
event collection and analysis, realtime monitoring, event snapshot, comprehensive analysis, event details,
and log auditing. It provides abundant reports, which can be exported periodically.
To access the firewall management component, select the Firewall Mgmt tab. Then, you can perform:
• Attack events monitoring
• Event analysis
• Event auditing
• Security policy management
• Intrusion detection
• Firewall device management
Attack events monitoring
The firewall management component supports centralized monitoring of security events. It can collect
and report attack events in real time, and provide the snapshot information based on firewall devices and
events.
Snapshot of events
The event snapshot presents the attack protection information in the last hour, including the time, total
number of events, blocked events count, source addresses and destination addresses, as well as event
types. Besides, it provides the TopN list of attack events, attack destination IP addresses and ports, attack
sources, and attack protocols, helping you track the latest security status of the network in an intuitive
way.
Configuration guide
From the navigation tree of the firewall management component, select Snapshot of Events under Events
Monitor to enter the event snapshot page, as shown in Figure 44 .