A world map, spinning 3D globe, or table showing the top 10, 20, 50, 100 threat destinations.

On the map view, hover the cursor over data points to see the source device and IP address, destination IP address and country, threat level, and the number of incidents (blocked and allowed).

The top threats to your network. Hover the cursor over data points to see the threat, category, threat level, threat score (blocked and allowed), and the number of incidents (blocked and allowed).

The following incidents are considered threats:

• Risk applications detected by application control
• Intrusion incidents detected by IPS
• Malicious web sites detected by web filtering
• Malware/botnets detected by antivirus

The top threats to your network from risk applications, intrusion incidents, malicious websites, and malware/botnets.

Only visible in a Fabric ADOM.

The historical threats to your network from risk applications, intrusion incidents, malicious web sites, and malware/botnets.

The top threats by weight and count to your network from risk applications, intrusion incidents, malicious websites, and malware/botnets.

FortiSandbox detection detail, including scan doc name, source user, destination IP, verdict level, action, and service.

The number of files detected by FortiSandbox by type: Malicious, Suspicious, Clean, and Others.

Users or IP addresses that have the highest number of malicious and suspicious files detected by FortiSandbox.