Skip to main content

report

[Report] View​

1. System Performance Statistics​

System performance statistics is a feature that allows you to visually monitor the overall performance metrics of the SHIELDEX system.
This screen provides the usage status of key resources such as CPU, memory, disk usage, and network transmission and reception amounts, along with average values and graphs.
Through this, administrators can quickly grasp the resource load status of the system and detect performance anomalies early.

⚠️ This menu appears when logged in with a "System Administrator" account.
Administrator permission settings can be found under [Administrator Settings] > [Account and Permission Management].


Search Conditions​

  • Query Unit Time: Selectable for viewing in units of 10 minutes / 1 hour / 1 day
  • Query Time Zone: You can select the start and end times of the time zone you want to query.
  • Query Date: You can set the start date and end date to filter by period.

ⓘ All retrieved data is calculated and displayed as an average based on the selected time unit.


System Performance Average Statistics​

The average usage rate of system resources during the queried period is provided in the form of a summary card:

  • CPU usage: Average CPU Usage (%)
  • Memory Usage Rate: Average usage (%) compared to total memory
  • Disk Usage: Average usage rate of storage devices (C drive, E drive, etc.) (%)

ⓘ Each item is displayed as a percentage (%), and the higher the usage, the more it is considered a burden on resources.


Network Traffic Statistics​

The network usage of the system is displayed in the following two items:

  • Network Reception Volume: Total data volume received from external sources during the queried period (MB)
  • Network Transmission Volume: Total data volume sent externally during the queried period (MB)

System Performance Summary Chart​

  • Chart Configuration:

    • X-axis: Selected time interval (e.g., 10-minute interval)
    • Y-axis: Usage and Transmission Volume by Each Performance Metric

  • Indicator Display Item:

    • CPU (%)
    • MEMORY (%)
    • DISK (C:, E:)
    • Network Reception (MB)
    • Network Transmission Volume (MB)

  • You can check detailed figures for each point in time when you hover over the mouse.

  • You can explore the chart in detail using the zoom/pan/move features in the upper right corner.

  • You can download the visualization charts by clicking the menu bar icon. (SVG, PNG, CSV)


Report Utilization Guide​

  • Check System Resource Load: If the CPU or memory usage is consistently high, you should check for excessive service usage or the possibility of errors.
  • Disk Space Monitoring: It may be time to clean up logs/files when there is a sudden increase in disk usage.
  • Network Traffic Anomaly Detection: Sudden fluctuations in transmission and reception volumes can be analyzed as potential malicious activity detection or signs of service anomalies.

2. Inflow and Processing Statistics - Comprehensive Statistics​

The inflow and processing statistics provide a statistical analysis of the processing results of files received through the SHIELDEX CDR system, and you can set the query period in the upper right corner to view the statistics.
This feature is utilized for the following purposes:

  • Check CDR Result Distribution (Success/Exception/Blocked)
  • Traffic Timing, Statistics Analysis by File Extension
  • Understanding the Inflow and Blocking Status by Channel

⚠️ This menu is displayed when logged in with a “System Administrator” account to access a specific channel page, or when logged in with a “Channel Administrator” account.
Administrator permission settings can be found under [Administrator Settings] > [Account and Permission Management].


CDR Result Statistics and Status of Incoming Files​

Distinguish the CDR processing results against the total number of incoming files in the form of a pie chart and summary list:

  • success: Decontamination (CDR) processing completed and reconstructed file
  • exception: Exceptionally imported files based on policy settings
  • Block: Files blocked from entry by security policy

ⓘ Each processing result can be checked in detail by clicking the “View Details >” button.


Overall Inflow Statistics by Period (Inflow Increase)​

  • Bar ChartVisualize the number of incoming files by date.
  • It is useful for detecting whether there is an increase in inflow on a specific date and for detecting abnormal inflows.

Traffic Statistics by Extension​

  • Distribution of file extensions that were imported during the queried periodBar Graphis expressed as.
  • It is possible to analyze the file flow by major extensions to identify usage patterns.

3. Inflow and Processing Statistics - Statistics by Channel​

The statistics tab by channel is a screen designed to aggregate and compare the inflow, import, and blocking results of files based on various inflow channels within the organization.
You can analyze the results of the application of the decontamination security policy by channel and comprehensively evaluate the operational status.

⚠️ This menu is displayed when logged in with a “System Administrator” account and accessing a specific channel page.
Administrator permission settings can be found under [Administrator Settings] > [Account and Permission Management].


Traffic Channel Statistics Status​

Bar Cumulative ChartVisualize the processing results of files imported through each channel.

divisionDescription
Number of InflowsTotal number of files imported through the selected channel during the specified period
Import CountNumber of files brought into the system after CDR success or exception handling
Blocked CountNumber of files not imported due to policy restrictions

Channel-specific Inflow Blocking Status​

by each channelThe reason why the file was blockedA table that shows in detail will be provided.

ⓘ Encrypted files, unsupported extensions, tampered extensions, and various other blocking reasons may appear in this item.
If the blocking reason is repeated, it is necessary to review the security policy settings of the corresponding channel.


4. Content Risk Statistics​

Content risk statistics is a statistical screen that classifies the security risk levels of various content elements included in the incoming files by grade.
The administrator can check what types of threat elements are being introduced and to what extent through this screen, and can use it as a reference for policy settings or exception handling.

⚠️ This menu is displayed when logged in with a “System Administrator” account to access a specific channel page, or when logged in with a “Channel Administrator” account.
Administrator permission settings can be found under [Administrator Settings] > [Account and Permission Management].


Risk Level Statistics and Status​

  • Risk Level Classification: The content is classified into the following 6 levels of risk based on the analysis results.
안전 의심되는 위험요소 컨텐츠가 없는 경우입니다.
의심 객체 및 하이퍼링크가 포함된 경우입니다.
경고 매크로 및 액티브X가 포함된 경우입니다.
위험 외부 데이터 연결이 가능한 요소가 포함된 경우입니다.
심각 식별할 수 없는 컨텐츠(바이러스 등)가 포함된 경우입니다.
[위변조](/shieldex/Knowledge_Base/glossary#파일-관련-용어) 포맷과 확장자가 일치하지 않은 경우입니다.
  • Visualization Configuration:
    • Intuitively display the ratio of each risk level with a pie chart
    • Display representative content items and counts in card format by grade.
    • You can check the detailed list of related file neutralization processing by clicking "View Details".

Overall Content Element Inflow Statistics​

  • Bar Graph: Visually displays the number of detections by threat factor within the query period.
  • Data Table: You can check the risk level, number of cases, and ratio by content item.
  • Main Content Items
    • macro
    • External Dynamic Data Exchange (DDE) Link
    • ActiveX
    • virus
    • hyperlink
    • Extension Forgery
    • OLE Object
    • File Size Change
    • External Link
    • PDF Object

ⓘ You can compare the risk levels and the mapped content types at a glance to see which threat factors are being introduced frequently.