Console Overview

In the How to Configure section, we covered our first bucket activation to enable scanning and our first data classification schedule. Now let's take a closer look at the rest of the console.

The following sections will walk you through each area of the console and what you can expect from it. The goal, in general, has been to make the scanning, classifying, and protection of your objects simple and straight forward. The console is simple to get around with left side and top navigation. The left side will take you between the main Dashboard view, Bucket Protection and/or Schedules page, the Configuration options and the User Management area. While the top allows for in-place upgrades, your account management options, and Group switching.

Dashboard Overview

The Dashboard view is the window into your scanning and/or classifying status. If you are using Antivirus for Amazon S3 it is made up of six main parts:

• Top Row Informational widgets

• Threat Map

• Total GBs Scanned chart

• Total Objects Scanned chart

• Total Problem File Objects chart

• Bucket Protection Status chart

If you are using Data Classification for Amazon S3 it is made up of six main parts:

• Top Row Informational widgets

• Threat Map

• Total GBs Classified chart

• Total Objects Classified chart

• Total Objects with Findings chart

• Bucket Protection Status chart

If you are using both tools within the same Management Console then you will see the above data separated for AV and DC within your dashboard.

Right after completing the initial configuration and enabling one bucket within the same region as the console, your Dashboard view could look as follows:

Antivirus for Amazon S3

Data Classification for Amazon S3

Both tools in use at once

Top Row Informationals

The top row of widgets gives you a quick view to specific details around your environment. Whereas the charts below it give you more realtime views, the top row gives you the aggregate totals for the time slices for Total Data Scanned and Total Objects Scanned along with the total number of accounts protected within this deployment and total number of problem files found in the last 24 hours. Each informational is clickable. The Total Data Scanned and Total Objects Scanned will pop open the totals for each time slice. What is shown on the main page for those two are lifetime totals. The Total Active Accounts will redirect you to the Linked Accounts page. The Total Active Accounts tells you all the linked accounts you have setup and whether they are actively being protected. The Problem Files (24hr) will redirect you to the Problem Files page. The Problem Files (24hr) shows you the infected, error and unscannable file counts.

To see what it looks like, click between the tabs just below:

After initial configuration

With some data

Threat Map

The Threat Map provides a centralized view of all regions, highlighting detected malware and the total S3 storage usage.

Threats by Region Map

S3 Storage by Region Map

Threats by Region

The Threats by Region map provides an overview of all regions containing buckets (AWS) or blob containers (Azure). It also indicates whether malware, suspicious files, or sensitive data have been detected, with the latter available only when Data Classification is enabled.

A green region indicates no malware or sensitive data was found.

A yellow region indicates that suspicious files were found (with AV) or that sensitive data was detected (with DC).

A red region indicates malware was detected.

Clicking on one of the dots (green, yellow, or red in the legend) filters the view to show only regions where malware was found or not found:

You can also switch with the toggle at the left side, to only see the regions from Azure or AWS

Regional Information

By default, the right section of the threat map displays Regional Information. Here, you can view which containers contain malware and the total number of affected objects. The arrow icon allows you to navigate to the Problem File page for more detailed malware information.

Similarly, if sensitive information is detected, the map displays the total number of affected buckets and objects. You can click the arrow icon to access these details on the Findings page.

Hovering over a region on the map highlights specific information for that region.

Clicking the refresh button restores the default information for all regions.

S3 Storage by Region

The S3 Storage by Region map displays the total amount of data and storage (in GB) across all your buckets. The size of the circles on the map indicates the relative amount of data stored in each region, helping you easily identify regions with higher or lower storage usage.

Regional information

This section provides an overview of your total storage usage, including the combined number of GB, buckets, and objects across all your S3 storage.

When you hover over a specific region on the map, the details for that region—including the amount of data, number of buckets, and number of objects—are highlighted.

Clicking the refresh button restores the default information for all regions.

Configuration Dashboard Panel

Click the gear icon above the Regional Information section to open the Configuration Dashboard Panel. In this panel, you can customize the map view by selecting filters to display regions based on:

• The number of buckets

• The amount of data

• The number of objects

The size of the circles on the map will adjust dynamically based on the selected filter, visually emphasizing regions with higher values for your chosen metric.

Overview / Detailed Chart Information

The charts can give you high-level information or slightly more detailed information. This toggle is what determines what the charts will show. For example, in the Total GBs Scanned the Overview option will simply show a total number of GBs that have been scanned in the time slice selected. While the Detailed option will reflect the breakdown of the 3 scan types (event, retro and API).

Time Window

You centrally control the time window the charts should reflect. The default is a 24 hour view when landing on the page. You can drop that to one hour or extend it out to cover a greater period of time. Custom allows you to specify a particular window of time that may not conform to the default selections.

Total GBs Scanned Chart

This chart represents the number of gigabytes scanned across all enabled buckets and regions (and linked accounts). You can track the number of gigabytes in 6 time slices: 1 hour, 24 hour, 7 day, 30 day, 90 day and custom range from the central time window picker.

To see what it looks like, click between the tabs just below:

After initial configuration:

With some data:

Detailed Data View:

Total Objects Scanned Chart

The number of objects or files scanned across all enabled buckets and regions (and linked accounts). You can track the number of objects / files in 6 time slices: 1 hour, 24 hour, 7 day, 30 day, 90 day and custom range from the central time window picker.

To see what it looks like, click between the tabs just below:

After initial configuration:

With some data:

Detailed Data View:

Total Number of Problem File Objects

The number of objects or files found to be infected, unscannable (exceeding file size limit or password protected) or in an errored state across all enabled buckets and regions (and linked accounts). You can track the number of infected / exceeded file size / error files in 6 time slices: 1 hour, 24 hour, 7 day, 30 day, 90 day and custom range from the central time window picker.

Note

Exceeded File Size files are currently only those over 2gb in size.

Password protected files and encrypted files are logged as unscannable.

If you work with a lot of these types of files please Contact Us and we'll work with you to get this sorted out.

To see what it looks like, click between the tabs just below:

After initial configuration:

With some data:

Detailed Data View:

Bucket Protection Status

A by-region view of all of the buckets in your account and their current enabled status. If they are enabled for scanning by the console you are connected to, they will show in green. If they are enabled for scanning by another Cloud Storage Security Console, the will show in purple. If they are not enabled for scanning by any console, they will show in red.

To see what it looks like, click between the tabs just below:

After initial configuration:

With another Cloud Storage Security console also scanning:

Populated Dashboard Example

Once you've been running the product for a while, your dashboard may look as follows: