The Protection Status tab on the Container Microsegmentation page shows your cluster defenses in one place: risk trends across the last 24 hours, 30 days, and 180 days, plus a chronological list of alerts triggered by your defense rules. Use this tab to identify active threats and update rule actions without leaving the page.
Before you begin
The tab shows alerts only for defense rules whose action is set to Block or Alert. Rules set to Allow generate no alerts.
Alert deduplication is calendar-day based. If multiple alerts share the same source pod, destination pod, port, and cluster within a single calendar day, they are counted as one entry. The Attempts column shows the total number of access attempts for that entry.
Prerequisites
Before you begin, ensure that you have at least one defense rule created and enabled for a cluster, with its action set to Block or Alert.
View the Protection Status tab
Log on to the Security Center console. In the top navigation bar, select the region of the asset you want to manage. The available options are China and Outside China.
In the left-side navigation pane, choose Protection Configuration > Container Protection > Container Microsegmentation.
Click the Protection Status tab.
The tab displays two sections: defense statistics and the alert list.
Defense statistics
The defense statistics section summarizes protection coverage and risk activity across your clusters.
| Panel | Description |
|---|---|
| Risks in Previous 24 Hours | Number of risk events detected in the last 24 hours |
| Risks in Previous 30 Days | Number of risk events detected in the last 30 days |
| Risks in Previous 180 Days | Number of risk events detected in the last 180 days |
| Unprotected Clusters/Total Clusters | Ratio of clusters without an active defense rule to the total number of clusters |
| Rules | Total number of defense rules configured across all clusters |
Alert list
The alert list shows all alerts generated by defense rules whose action is Alert or Block, sorted in reverse chronological order.
To update the action of the defense rule that triggered an alert, locate the alert and use either of the following methods:
Click Edit Rule in the Actions column.
Click the
icon to the right of Edit Rule.
Rule changes take effect within 1 minute.