About the SmartVision critical malware detection panel

The critical malware detection panel shows the number of hosts that triggered critical malware alerts. Critical malware alerts consist of Malware Object, Web Infection, and Malware Callback alerts.

Note

SmartVisionappliances ( SmartVision Edition appliances, SmartVision-enabled Network Security sensors, and SmartVision-enabled integrated appliances) analyze Web traffic transferred over SMB and SMB 2 protocols only.

The panel displays one or two of the following alert categories:

MVX [VM Detected Hosts]

The legend shows the number of hosts that triggered malware or Web infection alerts.

The pie chart section is a link to the list of corresponding alerts.

Callback Hosts

The legend shows the number of hosts that attempted to communicate with a botnet server.

The pie chart section is a link to the list of corresponding alerts.

Because SmartVision Edition appliances do not track callback activities or Web Infections, their critical malware alerts are limited to Malware Object alerts.

Critical malware alert category	Hosts are counted for these alert types
Critical malware alert category	SmartVision edition appliance	SmartVision‑enabled Network Security sensor or integrated appliance
MVX [VM Detected Hosts]	Malware Object	Malware Object and Web Infection
Callback Hosts	—	Malware Callback

The example on the left is for a SmartVision Edition appliance. The example on the right is for a SmartVision-enabled sensor or integrated appliance.

NX_SmartVision_CMD_edition_0_SmartVision_VMDetectedHosts.png

By default, the panel counts hosts for unacknowledged alerts triggered over the past 24 hours.