Web Reporting Page Descriptions

Web Reporting Overview

The Overview page provides a synopsis of the activity on your Web Security appliances. It includes graphs and summary tables for the incoming and outgoing transactions. For more information, see the Web Reporting Overview.

Users Report (Web)

The Users page provides several web tracking links that allow you to view web tracking information for individual users.

From the Users page you can view how long a user, or users, on your system have spent on the internet, on a particular site or URL, and how much bandwidth that user is using.

From the Users page you can click on an individual user in the interactive Users table to view more details for that specific user on the User Details page.

The User Details page allows you to see specific information about a user that you have identified in the Users table on the Web > Reporting > Users page. From this page you can investigate individual user’s activity on your system. This page is particularly useful if you are running user-level investigations and need to find out, for example, what sites your users are visiting, what Malware threats they are encountering, what URL categories they are accessing, and how much time a specific user is spending at these sites.

For more information, see the Users Report (Web). For information on a specific user in your system, see the User Details (Web Reporting)

User Count Report (Web)

The User Count page provides the aggregated information about the total number of authenticated and unauthenticated users of the Web Security appliances with Centralized Reporting enabled. The page lists the unique user count for the last 30 days, 90 days, and 180 days.

Web Sites Report

The Web Sites page allows you to view an overall aggregation of the activity that is happening on your managed appliances. From this page you can monitor high-risk web sites accessed during a specific time range. For more information, see the Web Sites Report.

URL Categories Report

The URL Categories page allows you to view the top URL Categories that are being visited, including:

• the top URLs that have triggered a block or warning action to occur per transaction.
• all the URL categories during a specified time range for both completed, warned and blocked transactions. This is an interactive table with interactive column headings that you can use to sort data as you need.

For more information, see the URL Categories Report.

Application Visibility Report

The Application Visibility page allows you to apply and view the controls that have been applied to a particular application types within the Security Management appliance and Web Security appliance. For more information, see the Application Visibility Report.

Anti-Malware Report

The Anti-Malware page allows you to view information about malware ports and malware sites that the anti-malware scanning engine(s) detected during the specified time range. The upper part of the report displays the number of connections for each of the top malware ports and web sites. The lower part of the report displays malware ports and sites detected. For more information, see the Anti-Malware Report.

Advanced Malware Protection (File Reputation and File Analysis) Reports

There are three reporting pages showing file reputation and analysis data.

For more information, see the Advanced Malware Protection (File Reputation and File Analysis) Reports.

Client Malware Risk Report

The Client Malware Risk page is a security-related reporting page that can be used to identify individual client computers that may be connecting unusually frequently to malware sites.

For more information, see the Client Malware Risk Report.

Web Reputation Filters Report

Allows you to view reporting on Web Reputation filtering for transactions during a specified time range. For more information, see the Web Reputation Filters Report.

L4 Traffic Monitor Report

Allows you to view information about malware ports and malware sites that the L4 Traffic Monitor detected during the specified time range. For more information, see the L4 Traffic Monitor Report.

SOCKS Proxy Report

Allows you to view data for SOCKS proxy transactions, including destinations and users.

For more information, see the SOCKS Proxy Report.

Reports by User Location

The Reports by User Location page allows you to find out what activities that your mobile users are conducting from their local or remote systems.

For more information, see the Reports by User Location.

Web Tracking

The Web Tracking page allows you to search for the following types of information:

• Searching for Transactions Processed by Web Proxy Services allows you to track and see basic web-related information such as the type of web traffic that is being handled by the appliances.

This includes information such as time ranges, and UserID and Client IP addresses, but also includes information like certain types of URLs, how much bandwidth that each connection is taking up, or tracking a specific user’s web usage.

• Searching for Transactions Processed by the L4 Traffic Monitor allows you to search your L4TM data for sites, ports, and client IP addresses involved in malware transfer activity.
• Searching for Transactions Processed by the SOCKS Proxy allows you to search for transactions processed by the SOCKS proxy.

For more information, see the Web Tracking.

System Capacity Page

Allows you to view the overall workload that is sending reporting data to the Security Management appliance.

For more information, see the System Capacity Page.

Data Availability Page

Allows you to get a glimpse of the impact of the reporting data on the Security Management appliance for each appliance. For more information, see the Data Availability Page.

Scheduled Reports

Allows you to schedule reports for a specified time range. For more information, see the About Scheduled and On-Demand Web Reports.

Archived Reports

Allows you to archive reports for a specified time range. For more information, see the Viewing and Managing Archived Web Reports.