Cisco Cisco Web Security Appliance S670 Betriebsanweisung
18-3
AsyncOS 9.0.1 for Cisco Web Security Appliances User Guide
Chapter 18 Generate Reports to Monitor End-user Activity
Using the Reporting Pages
Changing the Time Range
You can update the data displayed for each security component using the Time Range field. This option
allows you to generate updates for predefined time ranges and it allows you to define custom time ranges
from a specific start time to a specific end time.
allows you to generate updates for predefined time ranges and it allows you to define custom time ranges
from a specific start time to a specific end time.
Note
The time range you select is used throughout all of the report pages until you select a different value in
the Time Range menu.
the Time Range menu.
Note
All reports display date and time information based on the system’s configured time zone, shown as a
Greenwich Mean Time (GMT) offset. However, data exports display the time in GMT only to
accommodate multiple systems in multiple time zones around the world.
Greenwich Mean Time (GMT) offset. However, data exports display the time in GMT only to
accommodate multiple systems in multiple time zones around the world.
Searching Data
Some reports include a field you can use to search for particular data points. When you search for data,
the report refines the report data for the particular data set you are searching. You can search for values
that exactly match of the string you enter, or for values that start with the string you enter. The following
report pages include search fields:
the report refines the report data for the particular data set you are searching. You can search for values
that exactly match of the string you enter, or for values that start with the string you enter. The following
report pages include search fields:
Note
You need to configure Authentication to view client user IDs as well as client IP addresses.
Time Range
Data is returned in...
Hour
Sixty complete minutes plus up to 5 additional minutes.
Day
One-hour intervals for the last 24 hours and including the current partial hour.
Week
On- day intervals for the last 7 days plus the current partial day.
Month (30 days)
One-day intervals for the last 30 days plus the current partial day.
Yesterday
The last 24 hours (00:00 to 23:59) using the time zone defined on the Web
Security appliance.
Security appliance.
Custom Range
The custom time range you defined.
When you choose Custom Range, a dialog box appears to let you enter start and
end times.
end times.
Search Fields
Description
Users
Search for a user by user name or client IP address.
Web Sites
Search for a server by domain or server IP address.
URL Categories
Search for a URL category.
Application Visibility
Search for an application name that the AVC engine monitors and blocks.
Client Malware Risk
Search for a user by user name or client IP address.