Sonicwall Reporting Server

Transcription

1 Sonicwall Reporting Server How to access the reporting server: Navigate to and enter your username and password provided. After you have logged in, click on the reports tab at the top of the middle column. On the left hand side, you can click on the either the organisation name to report on all units under the organisation, or click on the individual units. Note that the group reports are not as detailed as the single unit reports, and are missing some options. Below are the report types and a brief description for reporting on individual units. Page 1 of 6

2 Summary of Reports Report Custom Report Dashboard Status Bandwidth Services Web usage Web filer FTP Usage Mai Usage VPN Usage Attacks Virus Attacks Anti-Spyware Intrusion Prevention Configuration Events Description These reports are disabled. Brief Summary reports. Uptime reports of firewall/connection. Bandwidth usage overall and by user. This is a combined upload and download bandwidth figure. Service usage. Web usage by User, Site. Categories are only applicable if Sonicwall content filtering is purchased. Only applicable if Sonicwall content filtering is purchased. FTP usage. Mail usage. VPN tunnel usage. Port scanning/ip Spoofing attacks separate from Intrusion Prevention attacks. Virus attacks detected. Only applicable if a Gateway Antivirus Subscription has been purchased. Spyware attacks detected. Only applicable if a Gateway Antivirus Subscription has been purchased. IPS attacks detected. Only applicable if an IPS subscription has been purchased. Configuration for scheduled reports and summarisation. Changes to this are disabled. Alert settings for the device. Changes to this are disabled. Page 2 of 6

3 Information on reports Dashboard Reports Dashboard reports display an overview of bandwidth, uptime, intrusions and attacks, and alerts for each firewall. Bandwidth bandwidth is shown per hour. Top users of web at the unit level, this is shown as a pie chart with eight slices. The top seven Web users by IP address are each shown as a slice, with all other HTTP bandwidth combined in the eighth slice. Attacks Events at the global level, both attack events and virus attack attempts are shown per hour. Status Reports Status reports display the number of hours that the Sonicwall appliance were online and functional during the time period. Bandwidth Bandwidth reports display the amount of data transferred through the Sonicwall over the selected period. Note the bandwidth figures are a combined upload and download figure. Top Users Lists the top internal and external IP addresses users of bandwidth for a particular day. Over Time Lists the bandwidth used per day over a specified data range. Top Users Over Time - Lists the top internal and external IP addresses users of bandwidth over a specified date range. Page 3 of 6

4 Services Service reports provide information on the amount of data transmitted through the selected firewall by each service. Service reports are useful for revealing inappropriate usage of bandwidth and can help determine network policies. Web Usage Web usage reports can be used to view web bandwidth usage by the hour, day, or over a period of days. Additionally, you can view the top users of web bandwidth and view the most visited sites. For the Summary and Over Time reports, and for all reports involving Users, the browse time is also provided in one column of the table. The browse time is not displayed in reports for Category or Sites. Note the Category reports are only applicable for firewalls that have a Sonicwall content filtering subscription. Web filter Web filter reports are only useful for firewalls that have a Sonicwall Content Filtering subscription. Web filter reports provide information on the number of attempts that users made to access blocked web sites through the selected firewall. These reports include web sites blocked by the Content Filter List, customized keyword filtering, and domain name filtering. Web filter reports can be used to view blocked site access attempts by the hour, day, or over a period of days. Additionally, you can view the users that most frequently attempt to access blocked sites and the most popular blocked sites. Page 4 of 6

5 FTP Usage, Mail Usage and VPN Usage Those usage reports provide information on the amount of usage for each one of those protocols. They display the bandwidth usage for each of those services by the hour, day, or over a period of days. Additionally, you can view the top users of the bandwidth. Modifying Report Options You can modify the reports, allowing the report to be narrowed or expanded to criteria you specify by using the options box at the top of every report. Search criteria: The column drop-down list contains all the searchable columns of a report. It contains different options to search with different reports. The column drop-down list defines criteria for the search and filter functions. You can then specify an operator and the text to search with. Date criteria: For reports that are over time, you can specify a start and end date. Otherwise, the end date is greyed out as above, and data is displayed for the start date only. You can report on data up to 60 days earlier than the current date. Note that data is summarised from each firewall every few hours, and as a result, the reporting data for the current day may be incomplete. You can also click on the more options button on the search bar to change chart options, or increase the amount of items displayed in a report. By default, reports will display the top 20 items on each report, but this can be increased to 50, 100 or even all items. Page 5 of 6

6 Reporting on Wireless Hotspot Users You can report on how much bandwidth, websites, etc wireless hotspot users (using tickets) are going to by clicking on More Options in the search bar. Specify the search similar to the below to report over a particular month for an Over Time report. Page 6 of 6