Cyber Shield - Observed Domains Trend Analysis


You must configure your OpenVPN Cloud Shield Domain Filtering to enable monitoring. More details on Domain Filtering can be found here: Configuring Cyber Shield Domain Filtering | OpenVPN Cloud.

The Timeframe Metrics dashboard displays events for Observed Domains and Blocked Domains by category for a selected period of the previous 30 days. These metrics also include the Average Hourly Volume, Maximum Hourly Volume, and Minimum Hourly Volume of Observed or Blocked Domains for a selected period (24 hours, 7 days, 30 days). You may drill down to a more detailed report by category from the 7 days and 30 days ranges.

Analyze Observed Domains Trends:

  1. Access the Cyber Shield page in the administration portal.
  2. Click on the Timeframe Metrics pane.
    • The Observed Traffic, Blocked Traffic, Observed Domains, and Blocked Domains windows open. By default, the Observed Domains tab is active and the page displays a count of observed domain name queries over the last 24 hours. Note that the Classification Data section displays a breakdown of the observed domain content categories.
  3. Change the timeframe for the reporting data with the radio buttons on the right.
  4. Drill down to a specific week by clicking on a day in the chart.
    • Note that the data and timeframe change dynamically in the bar chart. You can drill further down to a specific day, and an hourly view is available for each day out of the last seven.

Steps: Timeframe Metrics

  1. From the Cyber Shield page, click the Timeframe Metrics panel.
  2. Choose either the Observed Domains or Blocked Domains tabs.
  3. To choose a specific timeframe, toggle the time settings (24 hours, 7 days, 30 days) to the desired period.
  4. To drill down and view a breakdown by Observed or Blocked Domains by category for a selected day, toggle either the 7 days or 30 days timeframe buttons. This allows a drill-down from 30 days to 7 days, and from 7 days to a specific day.
  5. Click a bar from the chart.