After you enable a defense rule, it allows, alerts on, or blocks traffic to the specified cluster. The Protection Status tab shows the alerts triggered by these rules.
Background information
The Protection Status tab displays alerts only for defense rules whose action is set to Alert or Block. No alerts are generated for rules with the Allow action.
Procedure
Log on to the Security Center console.
In the left-side navigation pane, choose . In the upper-left corner of the console, select the region where your assets are located: Chinese Mainland or Outside Chinese Mainland.
On the Container Microsegmentation page, click the Protection Status tab.
On the Protection Status tab, view the protection status of Container Microsegmentation.
The Protection Status tab is divided into two sections: defense statistics and the alert list.
Defense statistics
The defense statistics section displays Risks in Previous 24 Hours, Risks in Previous 30 Days, Risks in Previous 180 Days, Unprotected Clusters/Total Clusters, and Rules.
Alert list
The alert list displays alerts triggered by defense rules with the action set to Alert or Block, sorted in reverse chronological order. Security Center aggregates alerts from the same calendar day that share the same source pod, destination pod, port, and cluster into a single entry. The Attempts column shows the total number of access attempts for that entry.
In the Actions column of an alert, click Edit Rule to modify the defense rule that triggered the alert. You can also click the
icon next to Edit Rule to change the rule's action.NoteChanges to a defense rule take effect within one minute.
