The botnet report displays a line for each host that
is associated with traffic you defined as suspicious when configuring
the report. For each host, the report displays a confidence score
of 1 to 5 to indicate the likelihood of botnet infection, where
5 indicates the highest likelihood. The scores correspond to threat
severity levels: 1 is informational, 2 is low, 3 is medium, 4 is
high, and 5 is critical. The firewall bases the scores on: