Global Drops Monitor Graphs
Use the Monitor > Drops Monitor > Global graphs to monitor trends in drops over time for ACLs defined in Global Protection:
- IPv4 Blocklist
- Domain Blocklist
- IPv4/IPv6 IP/subnets/ranges/geolocation
- IPv4/IPv6 IP/subnet groups
- IPv4/IPv6 Services (Protocols or Layer 4 TCP or UDP Ports)
- IPv4/IPv6 Service Groups
These ACLs are always in “Prevention Mode” and drop packets without reference to the SPP Detection/Prevention settings. It is highly recommended that ACLs be added to SPPs which will follow Detection/Prevention settings for more flexibility and easier troubleshooting.
In all cases, you can customize the following viewing parameters: Reporting Period (1-hr to 1-yr), Linear/Logarithmic Y-Axis.
Placing the cursor on the Monitor graph displays a tool-tip with additional information.
Note: Release 6.2.0 has no display for Global “Track and Allow” “drops”. Avoid using Track and Allow until Release 6.3.0.