Skip to main content
Version: 10.1

rWeb Mitigation User Guide

A guide for rWeb users who are monitoring and mitigating active traffic across RIOS devices.

Before using, it is a good idea to familiarize yourself with some of the top level concepts shown in the General Concepts section, most importantly Groups and Zones. At a high level, you will manage your attack mitigation using Zones and their associated tools, with Groups used mainly for user and zone organization, as well as reporting and notifications.

A selected overview of some of the functions you can use:

  • Dashboard: Provides a summary view of all traffic going through your filter devices, based on your permissions. Admin level users can see everything, whereas a user restricted to a single group may see this data for only a zone or two.
  • Zone Control: This control panel lets you quickly navigate to a specific Group or Zone within the Group/Zone hierarchy for further configuration.
  • Groups: When selecting a Group using the Zone Control Selector or by clicking on a Group name hyperlink within rWeb, you will be brought to this section for managing the group.
  • Zones: When selecting a Zone using the Zone Control Selector or by clicking on a Zone name hyperlink within rWeb, you will go to the specific Zone for further configuration. This is where the bulk of relevant status and configuration for mitigation happen:
    • Mitigation Status shows the current incoming traffic to the selected Zone.
    • Mitigation Config shows the current filtering configuration of the seclected Zone.
    • Routing shows the devices and destination prefixes associated with this zone. When adding devices or configuring zones, you'll want to check this section to make sure that the correct devices have the configuration you intend.
    • Victim shows the current set of addresses declared as under attack using your current configuration, and lets you get more information per individual victim, including sample packets.
  • Alerts: Any relevant system alerts, notifying you of issues with licensing, device health, or possible configuration issues.
  • Search: An rWeb wide search, useful for narrowing down issues related to a given source or destination IP prefix.
  • Net Stats: Another overview section, allowing you to look at incoming traffic based on Group, Zone, Device, or per interface level (the last two requiring device permissions).