In the reporting produced from Firepower, how are the different levels (low, medium, high, etc.) determined? Is there a list somewhere that shows the different items that fall within each category?

I have a security camera server with a web interface that formerly used a port forward in the service provider's modem/router to allow access to this interface from the internet. A 5505 ASA was installed after the modem to create a VPN to allow remot...