After the Internet firewall is enabled for your network assets, you can view the overview information about the usual and unusual inbound traffic of your assets on the Internet Exposure page. This helps you identify malicious traffic at the earliest opportunity. This topic describes how to view the statistics and details of Internet exposure. This topic also describes how to analyze the traffic of related IP addresses in a visualized manner.

Prerequisites

The Internet firewall is enabled. For more information, see Internet firewall.

View the statistics of Internet exposure

The statistics section in the upper-part of the Internet Exposure page displays the statistics of usual and unusual inbound traffic of your assets. You can troubleshoot unusual traffic on the Exposure Details tab based on the statistics to ensure the security of inbound traffic for your assets.

  1. Log on to the Cloud Firewall console. In the left-side navigation pane, choose Traffic Analysis > Internet Exposure.
  2. In the upper-right corner of the Internet Exposure page, specify a time range for the query. Then, you can view the information in the statistics section and on the Exposure Details tab. The following table describes the information.
    You can select a time period from the drop-down list. You can also specify a custom time range within the previous 30 days.
    Parameter Description Supported operation
    Open Public IP Addresses The total number of open public IP addresses and the number of risky open public IP addresses. View the traffic statistics of a public IP address that is accessed: On the Open Public IP Addresses tab, find the IP address and click View Details in the Actions column. In the Open Public IP Addresses panel, view the access information about the IP address. This helps you identify the traffic of malicious behavior.
    Open Ports The total number of open ports and the number of risky open ports. View the traffic statistics of an open port: On the Open Ports tab, find the open port and click View Details in the Actions column. In the Open Ports panel, view the access information about the open port. This helps you identify the traffic of malicious behavior.
    Open Applications The total number of open applications and the number of risky open applications. View the traffic statistics of an open application: On the Open Applications tab, find the open application and click View Details in the Actions column. In the Open Applications panel, view the access information about the application. This helps you identify the traffic of malicious behavior.
    Details The traffic statistics of all assets. View the traffic statistics of an asset: On the Details tab, find the asset and click View Details in the Actions column. In the Details panel, view the access information about the asset. This helps you identify the traffic of malicious behavior.
    Cloud Products The number of public IP addresses to which inbound traffic flows to access cloud services. None.

Export the statistics of Internet exposure

You can click the Download icon icon in the upper-right corner of the Exposure Details tab to export the statistics of open public IP addresses, open ports, open applications, assets, and cloud services to your computer in the CSV format. This allows you to view and analyze the statistics.

Visualized analysis

The Visualized analysis tab displays the traffic of all public IP addresses, the traffic trend charts of all IP addresses, and the statistics of inbound traffic. This helps you monitor the inbound traffic of your assets in real time.

  1. Log on to the Cloud Firewall console. In the left-side navigation pane, choose Traffic Analysis > Internet Exposure.
  2. On the Internet Exposure page, click the Visualized analysis tab.
  3. On the Visualized analysis tab, specify a time range and view the information. The following table describes the information.
    You can select a time period from the drop-down list. You can also specify a custom time range within the previous 30 days.
    Parameter Description Supported operation
    IP Traffic This section displays the traffic statistics of all public IP addresses.
    • You can find an IP address and choose More > View Logs to go to the Internet Border tab of the Traffic Logs tab. You can view traffic logs of the IP address on the Internet Border tab.
    • You can find an IP address and choose More > View Trend to view the traffic trend of the IP address in the Trends of Traffic section.
    • You can click the search icon in the upper-right corner and enter a public IP address to refresh the traffic trend chart and then view the traffic trend of the IP address.
    Trends of Traffic This section displays the peak request and response traffic of all your assets in real time. You can move the pointer over a position in the trend chart to view the peak request and response traffic at the point in time that corresponds to the position. In the Trends of Traffic section, you can click a point in time on the x-axis to refresh the rankings in the IP Traffic section.
    Rankings of Visits by Traffic This section displays the top 10 source locations, top 10 IP address ranges based on session percentages, top 10 source IP addresses, and statistics of risky ports. None.