DDoS Feeds Status Details
Use the DDoS Feeds Status page to view the enforcement status of Distributed Denial of Service (DDoS) feeds.
In Sky ATP Only mode, you do not see the DDoS Feeds Status page under Monitor. An error message is shown that the page is unavailable because the current threat prevention type is set to Sky ATP only mode.
To view the DDoS Feeds Status page, you must have the Threat Management privileges or predefined roles enabled.
To view details of DDoS feeds status:
- Select Monitor > Threat Prevention > DDoS Feeds Status.
The DDoS Feeds Status page appears.
- Table 1 shows information provided on the DDoS Feeds Status page.
Table 1: Fields on the DDoS Feeds Status Page
Specifies the DDoS feed name to monitor the feeds.
Specifies the associated site name with the DDoS feeds
Specifies the name of the MX router where DDoS is enabled.
Specifies the IP address of the MX router.
Specifies the status of the MX router.
Specifies the action taken for the DDoS profile
To filter the data based on a specific action, click the filter icon and select the required DDoS profile action from the list.
Specifies the enforcement status of the feed. Hover over the status to view the reason for that particular status.
To filter the data based on a specific enforcement status, click the filter icon and select the required enforcement status from list to monitor the feed.
Specifies the name of the associated threat prevention policy.
Specifies the Policy Enforcement Group (PEG) associated with the policy.