WAF provides a data visualization service based on the detailed website logs collected by WAF. You can view and monitor WAF data in visual dashboards to better understand the real-time attack and defense situations of your website. This makes data analysis easier and enables you to make better decisions.

Background information

The data visualization service provides a WAF real-time attack and defense dashboard and a WAF security data dashboard. The data visualization service supports only Google Chrome 56 or later.

Note More WAF data visualization dashboards are coming soon.

WAF real-time attack and defense dashboard

The dashboard is updated every second. It displays website access distribution and blocked attacks for all your websites that are protected by WAF. This dashboard enables you to assess the stability of the website service and the quality of the network.
Note A statistical period is calculated from 00:00:00 of the current day to the current time.
Item Description
Inbound Bandwidth (bit/s) The inbound bandwidth traffic in bit/s.
Outbound Bandwidth (bit/s) The outbound bandwidth traffic in bit/s.
QPS The current queries per second (QPS).
Interception Ratio Today (%) The proportion of the requests that are intercepted by WAF to the total requests.
Blocked Attacks Today The number of attacks that are blocked by WAF.
Mobile OS Distribution The operating system distribution of mobile clients that initiate access requests.
PC Browser Distribution The browser distribution of PCs that initiate access requests.
TOP 10 Source IPs (Visits) The top 10 IP addresses that initiate access requests and the number of access requests.
TOP 5 Visited URLs (Visits) The top five URLs that receive the access requests.
Monitored Exceptions The HTTP status codes that are returned for exceptional requests and the occurrence of each status code.
Visits Statistics (mainland China) The access heat map that shows the distribution of sources that initiated requests in the last hour.
Requests (QPS) The QPS trend chart. This chart shows the changes in the number of requests blocked by WAF, including access request interceptions, fraud interceptions, web attack interceptions, and HTTP flood attack interceptions.
Bandwidth (bit/s) The trend chart of both the inbound and outbound bandwidths.
WAF real-time attack and defense dashboard

White points and dotted lines on the globe represent WAF data centers.

WAF security data dashboard

This dashboard displays security information about web attacks, HTTP flood attacks, and access request interceptions.
Note To display the security data of a region, click the name of the region in the lower-left corner. Alternatively, you can select all regions.
Item Description
Total Visits The total visits to the selected domain name on the current day.
Web Attacks The number of web attacks that are blocked by WAF for the selected domain name on the current day.
HTTP Flood Attacks The number of HTTP flood attacks that are blocked by WAF for the selected domain name on the current day.
Access Control The number of requests that are blocked based on custom protection policies for the selected domain name on the current day.
Top Web Attack Source IPs The top IP addresses that initiate attacks, the region to which each IP address belongs, and the number of attacks. You can move your pointer over the IP address of a top attack source to view the web attack type and the region to which the IP address belongs.
Region heat map The region heat map in the upper-right corner displays the distribution of the regions that initiate attacks.
WAF security data dashboard
The radar chart in the middle of the WAF security data dashboard shows the QPS, blocked web attacks, blocked HTTP flood attacks, and blocked access requests during a 15-minute period. You can select a time period in the radar chart to view the detailed security data information for that time period.
Note You can click a specific date in the lower part of the dashboard to display the security data for that date.
Item Description
Visits (15 minutes) The QPS.
Web Attacks The number of web attacks that are blocked by WAF.
HTTP Flood Attacks The number of HTTP flood attacks that are blocked by WAF.
Access control The number of requests that are blocked based on custom protection policies.
Top Web Attack Source IPs The top IP addresses that initiate attacks, the region to which each IP address belongs, and the number of attacks. You can move your pointer over the IP address of a top attack source to view the web attack type and the region to which the IP address belongs.
Web Attack Type The distribution of web attacks that are blocked by WAF by attack type.
Top Attack Source Region The top five attack source regions.
Top Hit Rule The top five WAF protection rules that are matched.
Security data

Enable the data visualization service

  1. Log on to the WAF console.
  2. In the left-side navigation pane, click Data Visualization. On the page that appears, select the region where your WAF instance is deployed and click Buy Now.
    Note If you choose Outside Mainland China, you can use the service only after you upgrade your WAF instance to the Business edition or Enterprise edition.
    Enable the data visualization service
  3. On the buy page, select Single-dashboard Service or Multi-dashboard Service for Data Visualization.
    Option Description Pricing
    Single-dashboard Service Only one data visualization dashboard is supported. USD 200/month
    Multi-dashboard Service All WAF data visualization dashboards are supported. USD 300/month
    Note The expiration time of the data visualization service is the same as that of your WAF instance. The system calculates the payment based on the service option you selected and the expiration time of your WAF instance. After you enable the data visualization service, you must renew the data visualization service and the WAF instance at the same time. You cannot renew your WAF instance separately.
  4. Read and select Web Application Firewall (Monthly Subscription) Service Agreement and click Buy Now.
  5. On the Data Visualization page, click the desired dashboard to view data.
    Note If you select Single-dashboard Service on the buy page, select the dashboard that you want to enable and click Enable Now.