What does "Intrusion Victim" in the Fortianalyzer IPS report Mean ?
Hi,
After reviewing the Fortinet IPS report for the first time I see multiple counts for both internal IP and external URL (www.) under the sub heading of "Intrusion Victims" .
Unlike all the other sub headings such as "Intrusions blocked" and "Intrusions Monitored" from the IPS report which a clear to me the "Intrusion Victims" has me confused. What does it actually mean ? Is it a measure of successful intrusion on the given IP or URL ? or something else all together.
Could someone please assist me in better understanding the true meaning and what cross check is required within what set of logs to determine if its a false positive or not ?
Thanks Rick.
