Home/Detection/Monitor/Warning/Policy/Diagnosis/System

Click each tab to go to the corresponding function pages for reading and configuring.

Tools

The following tools are provided:

• Help: Click to view the online help.
• Log off: Click to log off.
• Reboot: Click to reboot the system.

Network Health Index (NHI)

Shows the NHI of the system. The HNI is calculated by the system based on the proactive detection data. Three types of health status are supported:

• Unhealthy: The score is under 30.
• Subhealthy: The score range is from 30 to 80.
• Healthy: The score is above 80.

NHI Report

Shows the summary of the unhealthy and subhealthy items.

• Click Details to read the health report on the proactive detection pages.
• Click the summary information of the detected item, the system will go to the detailed information page in the proactive detection module.

System Uptime

Shows the uptime of the system for the latest login. Click Details to go to the monitor page for more detailed information.

Risk Distribution

Risk distribution uses a topology to show the security status of the network where the Hillstone device is deployed. The topology is composed by the Hillstone device, zones configured on the Hillstone device, and service/network nodes and hosts in each zone. From the topology, you can get the following information:

Device resource information: The zones that have traffic in the latest 1 hour are displayed around the device. The WAN zones are displayed on the top in the topology and at most 3 WAN zones are displayed. The system gathers the following three types of objects' statistics in zones to show the risk distribution status: service and network nodes, abnormal hosts, and threat hosts.

• Move the mouse over a zone, the tooltip appears to show the risk information (warning and attack) of the zone. Click the number of each statistical item to go to the corresponding function page for detailed information. Click Details in the upper right corner of the tooltip to read the detailed risk information of the zone, including user traffic statistics, application traffic statistics, service and network node information, abnormal traffic host information, attack source and attack destination information.
• Move the mouse over an object in a zone, the tooltip appears to show the corresponding risk information; click the name of the node or host to go to the related function page for more detailed information. When the number of zones in the topology is smaller than or equal to 7, at most 8 objects can be displayed of each type (service and network nodes, abnormal hosts, and threat hosts); when the number of zones in the topology is bigger than 7, at most 6 objects can be displayed of each type. The following icons are used to show the health status for the object:
  • : Healthy.
  • : Subhealthy.
  • : Unhealthy.
• If there is a yellow warning icon in the right side of a zone, it means the zone contains interfaces whose physical statuses are down. Move the mouse over the icon, the tooltip appears to show the detailed information about physical-down interfaces in the zone.
• Number between a zone and the device is the total traffic volumn of the zone, which is the real-time volumn sum of all interfaces in the zone. Click on the number, the Interface Traffic Information dialog appears and you can get the traffic information of all the interfaces in the zone.

Service and network node information, host information and server information in a zone: The service and network nodes, abnormal host, and threat host in a zone are shown below the zone icon. Do the following actions to get more information.

Device Status

Shows the firmware information, hardware information, total traffic, and session information:

• Total Traffic: Shows the current total traffic volumn (number above the trend chart) and the traffic trend of last 24 hours. Click Total Traffic to get detailed statistics in the monitor module.
  
• Concurrent Sessions: Shows the current concurrent sessions (number above the trend chart) and the concurrent session trend of last 24 hours. Click Concurrent Sessions to get detailed statistics in the monitor module.
• New Sessions: Shows the current new sessions (number above the trend chart) and the new session trend of last 24 hours. Click New Sessions to get detailed statistics in the monitor module.

• Serial Number: The serial number of the device.

• Hostname: The hostname of the device. The name can be modified on the System > System Management > Device Management > Settings page.

• Platform: The platform type of the device.

• Firmware: The version number of the firmware running on the device. The firmware can be upgraded on the System > System Management > Upgrade Management page.
• System Time: The time of the system. The time can be configured on the System > System Management > Device Management > System Time page.
• APP Signature: The version number of the APP signature database and the release date of the database.
• CPU/Memory Utilization: The current CPU/memory utilization. Click CPU/Memory Utilization to go to the monitor module for more information.
• CPU/Chassis Temperature: The current CPU/chassis temperature. Click CPU/Chassis Temperature to go to the monitor module for more information.
• Disk Space Utilization: The current disk space utilization. Click Disk Space Utilization to go to the monitor module for more information.
• Fan Status: Shows the running status of the fan.

Interface Information

The device front panel shows the interface status of the device.

• : The interface is available;
• : The interface is connected but not available;
• : The interface is disconnected.

Move the mouse over a interface icon to see detailed interface information.

The interface traffic chart shows the interface traffic statistics in a certain time period.

• Click Settings, and on the Settings dialog, select the time period for the data displayed in the chart.
• The stacked chart and bar chart are supported. You can switch the chart type by selecting the type from the drop-down list. If the stacked chart is selected, check or uncheck the interface from the legend to view the specified interface traffic information in the chart.
• Move the mouse over the stacked chart to view the statistics at a certain time point; move the mouse over a bar to view the detailed interface information in the tooltip or click Details on the tooltip to go to the monitor module for more detailed information.
• Click Details above the chart to go to the monitor module for more detailed information.

User Traffic

The top 5 users by traffic are display in a bar chart.

• Click Settings to specify a time period for the statistics data shown in the chart.
• Click Details to go to the monitor module for detailed information.
• Select legend items by checking the corresponding check boxes.
• Move the mouse over a bar, a tooltip with the interface traffic information appears, and click Details on the tooltip to go to the monitor module for more information.

APP　Traffic

The top 5 applications by traffic are display in a bar chart.

• Click Settings to specify a time period for the statistics data and applications or application groups shown in the chart.
• Click Details to go to the monitor module for detailed information.
• Move the mouse over a bar, a tooltip with the application traffic information appears, and click Details on the tooltip to go to the monitor module for more information.

Time Warning

Shows the number of warning message in a specified time period. The warning levels are described by circles in different colors:

• : Informational.
• : Alarm.
• : Critical.

Do the following operations to read the related information:

• Click Settings, on the Settings dialog, select the warning level and time period for the data displayed in timeline.
• Click Details to go to the warning module for more information.
• Move the mouse over a circle to see the warning summary information of the corresponding time point; click the message number or message type to go to the warning module for more information.
• Click a expanding icon on the timeline to read the warning statistics in the time period of .
• Click Previous View to go back to the previous view; click Home View to go back to the home view.