Fortinet white logo
Fortinet white logo

Administration Guide

Scan Statistics

Scan Statistics

This widget displays information about the files that have been scanned over a specific time period, including the following information.

Inputs

The input type from which the files were received.

Device, Adapter, On Demand, Network Share, Sniffer, URL, All Sources

The URL type is for scanned URLs received from FortiMail devices, URLs extracted from forwarded email body of BCC adapter, URLs from ICAP adapter, and sniffed URLs in email traffic.

Pending

The number of files pending. Pending files are files that are have just been received and have not been put into the job queue, and files that have been put into the job queue but have not yet been processed.

Processing

The number of files that are being processed.

Malicious

The number of files scanned for each input type that were found to be malicious in the selected time period.

Click the number to view the associated jobs.

High Risk

The number of files scanned for each input type that were found to be suspicious and posed a high risk in the selected time period.

Click the number to view the associated jobs.

Medium Risk

The number of files scanned for each input type that were found to be suspicious and posed a medium risk in the selected time period.

Click the link to view the associated jobs.

Low Risk

The number of files scanned for each input type that were found to be suspicious and posed a low risk in the selected time period.

Click the number to view the associated jobs.

Clean

The number of files scanned for each input type that were found to be clean in the selected time period.

Click the number to view the associated jobs.

Other

The number of files for each input type which have an unknown status. Unknown status files include jobs which have timed out, crashed, canceled by the user through a JSON API call, or terminated by the system.

Click the number to view the associated jobs.

Total

The total number of files for each input type in the selected time period.

If the device is the primary node of a cluster, the numbers in this widget are the total job numbers of all cluster nodes.

You can enable/disable the Include Historical Stats option in the settings of the Scan Statistics widget.

  • When enabled, the widget shows statistics for jobs that were finished within the specified time period.
  • When disabled, the widget only shows statistics for jobs that are not cleaned up.

This button only appears when Maintain statistical records of jobs is checked in System > Settings.

How admin permissions apply to scan statistics

An admin's permissions in the Menu Access section of the admin profile determines which jobs the admin can see in the Scan Statistics widget. See Admin Profiles.

Admin Profile

Permissions

Super Admin The widget shows the number of jobs scanned including a hyperlink. When the admin clicks the hyperlink, they are redirected to a new page listing all the jobs.
Read Write The widget shows the number of jobs scanned including a hyperlink. When the admin clicks the hyperlink, the new page will only show jobs which are submitted on-demand by the admin, and all other input jobs, such as Sniffer.
Read Only The widget shows all job numbers. However, the hyperlink is disabled.

Scan Statistics

Scan Statistics

This widget displays information about the files that have been scanned over a specific time period, including the following information.

Inputs

The input type from which the files were received.

Device, Adapter, On Demand, Network Share, Sniffer, URL, All Sources

The URL type is for scanned URLs received from FortiMail devices, URLs extracted from forwarded email body of BCC adapter, URLs from ICAP adapter, and sniffed URLs in email traffic.

Pending

The number of files pending. Pending files are files that are have just been received and have not been put into the job queue, and files that have been put into the job queue but have not yet been processed.

Processing

The number of files that are being processed.

Malicious

The number of files scanned for each input type that were found to be malicious in the selected time period.

Click the number to view the associated jobs.

High Risk

The number of files scanned for each input type that were found to be suspicious and posed a high risk in the selected time period.

Click the number to view the associated jobs.

Medium Risk

The number of files scanned for each input type that were found to be suspicious and posed a medium risk in the selected time period.

Click the link to view the associated jobs.

Low Risk

The number of files scanned for each input type that were found to be suspicious and posed a low risk in the selected time period.

Click the number to view the associated jobs.

Clean

The number of files scanned for each input type that were found to be clean in the selected time period.

Click the number to view the associated jobs.

Other

The number of files for each input type which have an unknown status. Unknown status files include jobs which have timed out, crashed, canceled by the user through a JSON API call, or terminated by the system.

Click the number to view the associated jobs.

Total

The total number of files for each input type in the selected time period.

If the device is the primary node of a cluster, the numbers in this widget are the total job numbers of all cluster nodes.

You can enable/disable the Include Historical Stats option in the settings of the Scan Statistics widget.

  • When enabled, the widget shows statistics for jobs that were finished within the specified time period.
  • When disabled, the widget only shows statistics for jobs that are not cleaned up.

This button only appears when Maintain statistical records of jobs is checked in System > Settings.

How admin permissions apply to scan statistics

An admin's permissions in the Menu Access section of the admin profile determines which jobs the admin can see in the Scan Statistics widget. See Admin Profiles.

Admin Profile

Permissions

Super Admin The widget shows the number of jobs scanned including a hyperlink. When the admin clicks the hyperlink, they are redirected to a new page listing all the jobs.
Read Write The widget shows the number of jobs scanned including a hyperlink. When the admin clicks the hyperlink, the new page will only show jobs which are submitted on-demand by the admin, and all other input jobs, such as Sniffer.
Read Only The widget shows all job numbers. However, the hyperlink is disabled.