Configuring the connections table

From the connections table, you can manage and view information about your connections.

While the trust evaluator runs (either during or after training), you can use Time frame to set the number of days of connections to display in the connections table.

From the connections table, you can take the following steps:
  • Select the type of connections you want to view (Trusted, Evaluated (but not categorized as trusted or untrusted), or Untrusted).
    Note: If the real-time trust evaluator encounters multiple incidents for the same connection (for example, an administrator who uses the same password for multiple accounts), then only the first incident might be recorded in the connections table.
  • Use the Filter box within connection types to create a subset of connections.
  • Click Download to download information about all of the connections that are shown in the connections table.
  • Select one or more connections from the table and then select Actions. You can add the selected connections to the Trusted connections group, the untrusted connections group, or to a custom group.

    If you select Add to custom group, the Add to custom group window displays. The group type must be Tuples, but you can either select an existing group or create a new group. For more information about tuple groups, see Groups overview.

    After you save and close the custom group, the selected connections are added to the group.

  • Select Hide connections in trusted groups (or Hide connections in untrusted groups) to hide any connections that match existing members in a trusted or untrusted group. When you select this option, only the trusted (or untrusted) connections found by the trust evaluator display in the connections table. The results reason shows as Trusted as input from user or Untrusted as input from user.
In addition, two graphs display the data from the connections table.
  • The Connections seen or evaluated graph displays the total number of connections that have been seen or evaluated by the trust evaluator. The graph includes connections that are known to be untrusted (and therefore not evaluated), as well as connections that are not yet evaluated (new connections). The number in the center of the graph reflects one of the following numbers:
    • If your mouse is not in the graph, the number reflects the total number of connections that were seen or evaluated in the selected timeframe.
    • If you hover your mouse over one of the graph elements, the number reflects the number of connections that are represented by the graph element (that is: new, trusted, evaluated, or untrusted).
  • The Trust scores assigned graph shows the number of connections in each trust score category and the percentage of connections in each category. Categories are labeled as 0 - 10, 11 - 20, and so on). This graph does not include new connections that are not yet evaluated.