Detections

In this article, we will explain Detections, another key function of Skylight interceptor.

Overview

Detections are modules that analyse traffic and generate alerts when suspicious traffic activity is recognized. You can easily control all detections in Interceptor and enable or disable them as needed.

Accessing Detections

► To access detections:

1. Go to Settings ► Security ► Detections

Enabling Network Detections

► To enable network detections:

1. Go to Settings ► Security ► Detections
2. Enable or disable network discovery.

Accessing Edit Policy

► To edit a policy:

1. Go to Settings ► Security ► Detections
2. Select the Policy you wish to edit.
   An Edit Policy dialog will appear.

This dialog will also include a non-editable short description of the detection as well as an indication of its severity.

Editing Detection Allowlists

► To edit detection allowlists:

1. Go to Settings ► Security ► Detections
2. Select a detection from the policy name list.
3. From the Edit Policy menu, you can add an allowlist. This will allow you to select from the field pull-down menu, either: Source IPs or Destination IPs, along with other specific parameters relating to a specified policy. For example, Public suffix, as shown below.