Cisco Cisco Web Security Appliance S670 User Guide

Page of 446
 
18-6
AsyncOS 8.5 for Cisco Web Security Appliances User Guide
 
Chapter 18      Web Security Appliance Reports
  File Analysis Page
File Analysis Page
See 
AMP Verdict Updates Page 
See 
Client Malware Risk Page
The Reporting > Client Malware Risk page is a security-related reporting page that can be used to 
monitor client malware risk activity. The Client Malware Risk page also lists client IP addresses involved 
in frequent malware connections, as identified by the L4 Traffic Monitor (L4TM). 
Client Detail Page for Web Proxy - Clients by Malware Risk 
The Client Details page shows all the web activity and malware risk data for a particular client during 
the specified time range. 
Step 1
Choose Reporting > Client Malware Risk.
Step 2
In the Web Proxy - Client Malware Risk section, click on a user in the “User ID / Client IP Address” 
column.
Related Topics
User Details Page, page 23-3
Section
Description
Time Range (drop-down list)
A menu that allows you to choose the time range of the data 
contained in the report. 
Web Proxy: Top Clients by 
Malware Risk
This chart displays the top ten users that have encountered a 
malware risk. 
L4 Traffic Monitor: Malware 
Connections Detected 
This chart displays the IP addresses of the computers in your 
organization that most frequently connect to malware sites. 
Web Proxy: Clients by Malware 
Risk
The Web Proxy: Clients by Malware Risk table shows detailed 
information about particular clients that are displayed in the Web 
Proxy: Top Clients by Malware Risk section. 
L4 Traffic Monitor: Clients by 
Malware Risk
This table displays IP addresses of computers in your 
organization that frequently connect to malware sites.