Tree View
The Tree View displays the entire URL directory of the domain in a tree view. You can choose either one of the URLs to view its violation statistics. Please note that only the URLs with parameters are included in the Tree View directory.
Web site directory
The left panel of the Tree View page shows the directory structure of the website. The / (backslash) indicates the root of the site. You can click a URL in the directory tree, then the violation statistics of this URL will be displayed on the right side of the Tree View page. You can also click a directory, then click Rebuild Directory to rebuild anomaly detection models for all the URLs under the selected directory.
URL-specific data
This part of the Tree View page shows the statistics of a specific URL.
Parameters | Description |
---|---|
Access Frequency |
The frequency at which this URL was accessed in last 24 hours. The frequency is divided into 7 levels, as defined below:
|
Model Initialization Date |
The date and time when the mathematical model of this URL was initialized. It shows when FortiWeb began to learn about the data of this URL. |
Action (Alert/Block) |
The actions taken for this URL for all requests in last 24 hours, including the number of requests alerted and blocked. |
Anomaly |
The anomalies detected by the machine learning model. |
Violation Trend
This chart shows the trend of violations in last 24 hours, including the number of violations alerted and blocked.
Rebuild URL and Import buttons
The Tree View page also provides two control buttons: Rebuild URL and Import.
- Rebuild URL—Click this button to clear the preceding mathematical model for the parameters in this URL, and then begin collecting new samples and build the models again. The samples collected for the previous model will be discarded.
- Import— Click this button to import an existing mathematical model of a specific parameter. For information on exporting data of a parameter, see Tree View.
Parameters
Parameters tab shows the HMM learning states of all the parameters attached to the URL. For example, if the URL is http://www.demo.com/1.php?user_name=jack, then user_name is the parameter. An URL can contain multiple parameters. Click the (View HMM Details) icon to view details on this parameter.