21.3 Alert Drill-Down Reports

Additional alert information is available in these drill-down reports. These reports only display data when an alert has been triggered. Clearing an alert also clears the alert report; however, the data is still available in a standard report.

Click the plus sign next to Alert Drill-Down Reports to expand the list to display the following reports:

21.3.1 Client Tampering Alert Data

Lists instances where a user made an unauthorized attempt to modify or disable the Security Client.

21.3.2 Files Copied Alert Data

Lists accounts that have copied data to removable storage.

21.3.3 Override Attempts Alert Data

Lists instances where client self-defense mechanisms have been administratively overridden, granting privileged control over the Security Client.

21.3.4 Port Scan Alert Data

Lists the number of blocked packets on the number of different ports (a large number of ports may indicate that a port scan occurred).

21.3.5 Uninstall Attempt Alert Data

Lists users who have attempted to uninstall the Security Client.

21.3.6 Unsecure Access Point Alert Data

Lists unsecured access points detected by the Security Client.