Technical Note: ZoneFox 4.0 - How can I tell if A...

FortiSIEM

FortiSIEM provides Security Information and Event Management (SIEM) and User and Entity Behavior Analytics (UEBA)

Article Id 194421

Description

How can I tell if AI is in Training mode or Anomaly Detection (AD) mode

Scope

Installation and Administration

Solution

When AI is first enabled it is in training mode - whereby it uses current event data to learn what is 'normal' behaviour for your organisation and build models.

We usually leave AI training for a few weeks, before switching it to Anomaly Detection (AD) mode, where it will generate alerts.

To check what mode your AI is in, in a browser view the AI dashboard (http://<AI_HOST_IP>:8144), the current mode is shown at the top right of the page in the darker green.

195

Broad. Integrated. Automated.

The Fortinet Security Fabric brings together the concepts of convergence and consolidation to provide comprehensive cybersecurity protection for all users, devices, and applications and across all network edges.

Technical Note: ZoneFox 4.0 - How can I tell if AI is in Training mode or Anomaly Detection (AD) mode