If your organization uses Prolexic to stop DDoS attacks, the Prolexic dashboard is a central place where you can view metrics on your configuration, review traffic analytics, and analyze events at a high level.

This dashboard lets you do the following:

Assess your environment. The dashboard provides specific metrics on your Prolexic configurations, such as the total number of virtual tunnels, circuits, routers, and unique data centers that are part of your environment. It also gives you key data at a glance to monitor the health and the security posture of your environment.
Monitor your network cloud firewall. You can view high-level data on firewall usage and activity across your Prolexic configurations. This dashboard highlights access control lists (ACLs) that your organization manages, Akamai-managed ACLs, and the network aliases in your environment. You can also see the rules that produced the most hit counts.
Review a summary of events and attack activity. The dashboard presents a summary of events based on severity, destination IP addresses generating the most events, the most attacked IP address, and more. This dashboard gives you a top-level view into attack events and the events that are a lower risk to your network.
View when the last mitigated attack occurred. To keep you informed about mitigated attacks, the dashboard reports when Prolexic last mitigated an attack in the past 30 days.
Check liveness at origin. You can confirm that the path from Akamai scrubbing centers to your origin is healthy for clean traffic.
Identify top sources of traffic. You can identify the top sources, AS numbers, and services that produce the most traffic. This is helpful as you investigate threats and attack traffic.
Notify administrators about Prolexic alerts and attacks. In the dashboard settings, you can define the administrators who should receive email notifications about alerts and attack data.

The dashboard contains these sections:

Last mitigated attack

This banner appears if an attack was mitigated in the past 30 days. It shows when the attack was mitigated, the peak volume of traffic (in bps), and the date and time this traffic was detected. Click View more details to view more information about the attack on the Routed Events page of Security Center.

Configurations

This area of the dashboard shows metrics on your Prolexic Routed setup. This includes:

Policy domains. Displays the total number of policy domains in your Prolexic account. A policy domain represents a data center configuration. Prolexic configurations are associated with policy domains.
Configurations. Displays the total number of Prolexic configurations. A configuration contains details about your Prolexic setup, including scrubbing center assignments, IP prefixes, BGP settings, and more. It defines how traffic flows in and out of Prolexic, which scrubbing centers are responsible for cleaning traffic, and how cleaned traffic is delivered to the origin. A policy domain can have one or more configurations.
Circuits. Displays the total number of circuits in your environment. A circuit is the virtual or physical network connection that delivers clean traffic from Prolexic to your network. Circuits are part of a Prolexic configuration.
vTunnels. Displays the total number of virtual GRE tunnels used for Prolexic Routed GRE. These tunnels are responsible for delivering clean traffic to the origin. If your organization uses Prolexic Routed GRE, vTunnels are part of your configurations.
Prolexic over ADC. Displays the total number of Prolexic over Akamai Direct Connect (ADC) setups across your configurations.
Data Centers. Displays the total number of unique data centers that are associated with your configurations and currently in production.
Routers. Displays the total number of unique routers that are associated with your configurations and currently in production.

Click Manage configurations to view and modify your Prolexic configurations. You can also click Security Center to view the Routed Map page in Security Center. This page shows the network topology of your Prolexic setup.

Firewall summary

This area of the dashboard shows data for Prolexic Network Cloud Firewall. This includes:

Customer Managed ACL. Shows the total number of access control lists (ACLs) rules that are configured and managed by your organization. This metric and the corresponding chart shows the total number of configured ACLs against your entitlements.
Managed Services ACL. Shows the total number of ACLs that are managed by Akamai. ACLs managed by Akamai are actively applied to your environment to block and mitigate malicious traffic.
Network Aliases. Shows the total number of network aliases based on these types: Source, Destination IP address (DIPA), and Big. This area of the dashboard shows the alias for each type against the allowed limit.
Hit count details. Shows the total rule hit count and the top three rules that are triggered from the Managed Services ACL and the Customer Managed ACL. The top rules show the total number of hits that occurred for each rule based on the selected date range. You can select to show data from the last 24 hours, last 7 days, last 30 days, and the last 90 days. By default, the dashboard shows hit count details from the last 30 days.

Click Network Cloud Firewall to view or manage the ACLs that apply to your Prolexic environment. For more information, see the Network Cloud Firewall documentation.

Traffic analytics

This area displays traffic analytics from Prolexic Routed. It shows:

Most attacked IP. Shows the destination IP address that’s most attacked across policy domains and the number of attacks targeting it in the past 30 days. A trend arrow icon indicates whether there was an increase or decrease in attacks, along with the rate of change since the previous 30-day period. This area also indicates if there were attacks that targeted this IP address in the previous 30-day period.
Total attack time. Shows the total duration of attacks from the past 30 days. A trend arrow indicates whether there was an increase or decrease in attack time, along with the rate of change since the previous 30-days period. The total duration of attacks from the previous 30-day period is also provided.
Most events triggered in a day. Shows the highest number of events that were triggered in a day within the past 30 days. A trend arrow icon indicates whether there was an increase or decrease in events, along with the rate of change since the previous 30-day period. The total number of events that were detected in the previous 30-day period is also provided.
Top 5 scrubbing centers by traffic volume. Shows the top 5 scrubbing centers and their location based on the volume of traffic in bits per second (bps) or packets per second (pps) that was cleaned in these locations. It also displays the percentage of total traffic handled by each scrubbing center.

Click Routed Trends report to view more data in the Prolexic Routed Trend reports. For more information on this report, see the Reporting documentation.

Events information

This area of the dashboard shows the following data from Prolexic Routed:

Events by severity. A line graph that shows events based on these severity levels:
- High. Indicates events are associated with an attack. These events are displayed with a red line.
- Medium. Indicates events have a score of 80 to 100, but are not associated with an attack. These events are displayed with an orange line.
- Low. Indicates events have a score below 80 and are not associated with an attack. These events are displayed with a green line.
Data is shown from the past 30 days.
Top Destination IPs. A bar graph showing the top four IP destination addresses that produced the most events in the past 30 days.

Click Routed Events to go to the Routed Events page in Security Center. For more information, see the Security Center documentation.

Liveness checks

This area of the dashboard shows data for liveness checks. Scrubbing centers frequently probe or check the origin (target) to confirm that it’s responsive, reachable, and the path for clean traffic is healthy. The area of the dashboard shows the following:

Summary. Displays the number of healthy and unhealthy targets relative to the total number of targets that are monitored by Prolexic. A target is the origin server IP address that’s protected by your Prolexic configuration.
Health Status. Shows the status of targets checked by scrubbing centers in EMEA, the Americas, and APAC. It shows the percentage of probes that reached your origin. A green value indicates a healthy state.

Click Liveness Checks report to see the Liveness Check report. For more information, see Network Observability Analytics (NOA) reports in the Reporting documentation.

Top talkers

This area of the dashboard shows the sources or hosts generating the largest volume of traffic in the past 30 days. The flow count indicates how many network connections each source, Autonomous System Numbers (ASNs), and service established with your environment. This area of the dashboard displays the following:

Top Sources. Shows the top three hosts (IP addresses) generating the most traffic and the flow count for each IP address.
Top ASNs. Shows the top ASNs where traffic comes from and the flow count for each ASN.
Top Services. Show the top destination IP addresses and ports that are receiving the most traffic. It also shows the flow count for each destination IP address and port.

Click Top Talkers report to view more data in the Top Talkers report. For more information, see Network Observability Analytics (NOA) reports in the Reporting documentation.