Dashboard

The Dashboard displays the overall anomalies detected by FortiNDR as well as the system status. The Dashboard contains three views: NDR Overview, Malware Overview, and System Status. Users are welcome to add custom dashboards and appropriate widgets tailored for their operations. There are FortiNDR widgets such as Botnet, Attack Scenarios, and Sessions Analyzed to cater to different needs.

The following sections describes the manual and usage in FortiNDR GUI:

NDR Overview

The NDR Overview dashboard displays network detection and response statistics as charts and graphs. Each widget can be filtered with a time range of 1 day, 1 week, or 1 month. When you click the Network Insights widgets, such as ML Discovery and Botnet, the widget expands to full screen.

ML Discovery is not available in Sensor mode.

Malware Overview

The Malware Overview dashboard displays information about malware attacks and performance information as charts and graphs.

System Status

The System Status dashboard displays information about the FortiNDR device. Use this dashboard to view license information, resource usage, and the processing queue.

Custom dashboards

You can create a custom dashboard using NDR Overview, Malware Overview and System Status widgets.

To add a widget to a dashboard:

1. In the dashboard banner, click Add Widget. The Add Dashboard Widget window opens.
2. Click the plus sign (+) next to the widget name.
3. Click OK.

The maximum number of widgets for each type of dashboard is as follows: NDR dashboard: 60 widgets Malware: 20 widgets System: 30 widgets Netflow: 30 widgets Custom: 30 widgets

To create a custom dashboard:

1. Go to Dashboard and click the Add (+) button below the System Status dashboard. The Create Custom Dashboard Widget pane opens.
2. In the Display Name field, enter a name for the dashboard and click Next.
3. Select the widgets to add to the dashboard and click Next.
4. Review your selections and click Next. The dashboard is added to the navigation pane below System Status.

You can create up to four custom dashboards.

To delete a custom dashboard:

Click the Actions menu next to the dashboard name and click Delete.

Dashboard widgets in Center mode

In Center mode, dashboard widgets are used to monitor the sensors. You can add the same widget for each sensor in your network, allowing you to easily compare the sensor's statistics.

Remember to use the widget settings to include sensors, so their data is displayed in the widgets.

To add a widget in Center mode:

1. In the dashboard, click Add Widget.
2. In Source Sensor, click the plus (+)sign,then select a sensor from the list and click Close.
3. From the Timeframe dropdown, select 1 Hour, 24 hours, 1 Week or 1 Month.
4. Click OK.
5. (Optional) To add the same widget for a different sensor, click Add Widget and repeat steps 2-4.