Versions Compared

Key

  • This line was added.
  • This line was removed.
  • Formatting was changed.
Section
id136081963
Section
id136081975
Section
background-color$lightGrayColor
id136081962

Topics Discussed

Table of Contents
maxLevel3
minLevel3

Section
id136081965
Note

To fully use this screen, you must add the following permission to your account:

  • Read IP Threat Lookup Rule(s)

  • Write IP Threat Lookup Rule(s)

  • Write IP Threat Lookup Rule Never Expire IP

  • Read IP Threat Lookup(s).

Anchor
Overview
Overview

Insert excerpt
ESLP:IP Threat Lookup Overview (snippet)
ESLP:IP Threat Lookup Overview (snippet)
nopaneltrue


Anchor
Access the IP Threat Lookup screen
Access the IP Threat Lookup screen
Access IP Threat Lookup


Overview

Graph / Table

Description

IP Lookups

This graph displays all the IP lookups that have taken place in your account.

AnIP Lookupindicates a user has searched for Armor's recommendation regarding to whitelist or blacklist an IP address.

DTB User

This table lists:

  • The name of the AMP user who performed an IP lookup (IPTLUser).
  • The date of their last IP lookup (Last Query Date).
  • The total number of IP lookups performed (Total Requests).

IP Lookup

You can use this box to perform an IP lookup.

To learn more, seePerform an IP Lookup.


Events

You can use this screen to view the IP addresses that your users have researched in AMP.

Column

Description

Source IP

This column displays the IP address that was researched.

Request Type

Standard - This lookup took place using the Armor API system.

Detailed - This lookup took place when a user used the IP Lookup feature in AMP.

Requestor

This column displays the full name of the AMP user who researched the IP address.

Date

This column displays when the search took place.

Recommendation Action

This column displays theFinal Recommendation that was displayed during an IP lookup.

When you performed a search, you will receive two types of recommendations:

  • The Recommendation entry is based on Armor's default policy.
  • The Final Recommendation entry is based on any rules that you have previously created.
    • For example, if you created a rule to blacklist 123.444.555.777, and then you perform a search on 123.555.777.999, then the Final Recommendation will most likely say Block because of your previously created rule.

Rules

This column displays the corresponding rule, if applicable.

If the column saysNone, then you can create a rule for this IP address. Hover over the rule, click the vertical ellipses, and then clickAddRule.


Rules

This section displays the rules that have been created in your account.

Column

Description

IP

The IP address that is included in the rule.

Added By

The name of the AMP user that created the rule.

Date Added

The date that the rule was created.

Expiration Time

The date that the rule expires, if applicable.

Rule

The type of rule (WhitelistorBlacklist).


Anchor
Add a rule
Add a rule
Add a Rule


Insert excerpt
ESLP:Add a rule (snippet)
ESLP:Add a rule (snippet)
nopaneltrue


Anchor
Delete a rule
Delete a rule
Delete a Rule


Insert excerpt
ESLP:Delete a rule (snippet)
ESLP:Delete a rule (snippet)
nopaneltrue


Anchor
Perform an IP Lookup
Perform an IP Lookup
Perform an IP Lookup


Insert excerpt
ESLP:Perform an IP lookup (snippet)
ESLP:Perform an IP lookup (snippet)
nopaneltrue


Info

Anchor
Troubleshoot Dynamic Threat Blocking screen
Troubleshoot Dynamic Threat Blocking screen
Troubleshooting

If you do not see any data in this screen, consider that:

  • You have not created a rule.
  • You have not performed an IP lookup.
  • You do not have permission to view this screen.
    • To fully use this screen, you must have the following permission enabled for your account:
      • Read IP Threat Lookup Rule(s)
      • Write IP Threat Lookup Rule(s)
      • Write IP Threat Lookup Rule Never Expire IP
      • Read IP Threat Lookup(s).

        Note

        To learn more about roles and permissions, see Roles and Permissions.


Additional Information

This feature includes GeoLite data, created by MaxMind. For more information, please visit the MaxMind website.




Was this helpful?