Viewing ongoing or recent mitigation details
The DDoS Mitigation and Reporting portal shows details about any ongoing or recent mitigations started manually by the Lumen SOC or through auto-mitigation triggered by a high severity alert.
Details include countermeasures used and the amount of traffic passed or dropped.
You can also view a DDoS alert summary and DDoS alert traffic details.
To view ongoing or recent DDoS mitigations:
- Depending on your DDoS product, you can access the DDoS Mitigation and Reporting dashboard using one of the following methods:
- Using the left menu, click Services, click Service Portals, then click DDoS Mitigation and Reporting. Confirm that you are going to an external site, then click Log In with SSO.
- Using the left menu, click Monitoring & Reports, click Security Solutions Analytics, then click DDoS Mitigation and Reporting (in either the Reports or DDoS Mitigation Service sections).
- Using the left menu, click Services, click Service Portals, then click DDoS Mitigation and Reporting. Confirm that you are going to an external site, then click Log In with SSO.
The DDoS Mitigation and Reporting portal shows the dashboard.
- Click the Mitigation tab, then click Ongoing or Recent.
The DDoS Mitigation and Reporting portal shows ongoing or recent mitigations.
- Do any of the following to view more details:
- Click the Per TMS tab to see the scrubbing centers the traffic entered.
- Click the Per Countermeasures tab to view which countermeasures dropped the majority of the traffic volume.
- Click the + next to a countermeasure to view additional filters.
- Click the Per TMS tab to see the scrubbing centers the traffic entered.
