View EVE Dashboard

You can view the EVE analysis information in the following dashboards:

Before you begin

  • In an access control policy, the Encrypted Visibility Engine (EVE) must be enabled under Advanced Settings.

  • To view the Connections with Detected Process Names and Malicious Processes widgets, the devices must be running Firewall Threat Defense Version 7.7 or later.

Procedure

Step 1

Go to Overview > Dashboards heading > Dashboard.

Step 2

In the Summary Dashboard window, click the switch dashboard link and choose Application Statistics from the dropdown box.

Step 3

Choose the Encrypted Visibility Engine tab to view the following two dashboards:

  • Top Encrypted Visibility Engine Discovered Processes—Displays top client processes used in your network and the connection count. You can click the process name in the table to see the filtered view of the Connection Events page, which is filtered by the process name.

  • Connections by Encrypted Visibility Engine Threat Confidence—Displays connections by the confidence levels (Very High, Very Low, and so on). You can click the Threat confidence level in the table to see the filtered view of the Connection Events page, which is filtered by the confidence level.