Cisco Cisco Web Security Appliance S380 User Guide
19-2
AsyncOS 9.1.1 for Cisco Web Security Appliances User Guide
Chapter 19 Web Security Appliance Reports
Overview Page
Overview Page
The Reporting > Overview page provides a synopsis of the activity on the Web Security appliance. It
includes graphs and summary tables for Web traffic processed by the Web Security appliance.
includes graphs and summary tables for Web traffic processed by the Web Security appliance.
System Overview
Section
Description
Web Proxy Traffic
Characteristics
Characteristics
Listing of Average transactions per second in past minute
,
Average bandwidth (bps) in past minute
,
Average response
time (ms) in past minute
, and
Total current connections
.
System Resource Utilization
Listing of current
Overall CPU Load
,
RAM
and
Reporting / logging
disk
usage. Click System Status Details to switch to the System
Status page (see
for details).
Note
The CPU utilization value shown on this page and the CPU
value shown on the System Status page may differ slightly
because they are read separately, at differing moments.
value shown on the System Status page may differ slightly
because they are read separately, at differing moments.
Time Range-based Categories and Summaries
Section
Description
Time Range: Choose a time range for the data displayed in the following sections. Options are Hour,
Day, Week, 30 Days, Yesterday, or a Custom Range.
Day, Week, 30 Days, Yesterday, or a Custom Range.
Total Web Proxy Activity
Displays the actual number of transactions (vertical scale) as well
as the approximate date that the (Web Proxy) activity occurred
(horizontal timeline).
as the approximate date that the (Web Proxy) activity occurred
(horizontal timeline).
Web Proxy Summary
Allows you to view the percentage of Web Proxy activity that are
suspect or clean Web Proxy activity.
suspect or clean Web Proxy activity.
L4 Traffic Monitor Summary
Reports on traffic monitored and blocked by the L4 Traffic Monitor.
Suspect Transactions
Allows you to view the web transactions that have been labeled as
suspect by the various security components.
suspect by the various security components.
Displays the actual number of transactions as well as the
approximate date that the activity occurred.
approximate date that the activity occurred.
Suspect Transactions Summary
Allows you to view the percentage of blocked or warned
transactions that are suspect.
transactions that are suspect.
Top URL Categories:
Total Transactions
Total Transactions
Displays the top 10 URL categories that have been blocked.
Top Application Types:
Total Transactions
Total Transactions
Displays the top application types that have been blocked by the
AVC engine.
AVC engine.
Top Malware Categories:
Monitored or Blocked
Monitored or Blocked
Displays all malware categories that have been detected.
Top Users: Blocked or
Warned Transactions
Warned Transactions
Displays the users that are generating the blocked or warned
transactions. Authenticated users are displayed username and
unauthenticated users are displayed by IP address.
transactions. Authenticated users are displayed username and
unauthenticated users are displayed by IP address.