WatchGuard Technologies FireboxTM System 4.6 User Manual

User Guide

115

Report sections and consolidated sections

Manually running a report

At any time, you can run one or more reports using Historical Reports. From 
Historical Reports:

1

Enable the checkbox next to each report you would like to generate.

2

Click Run.

Report sections and consolidated sections

You can use Historical Reports to build a report that includes one or more sections. 
Each section represents a discrete type of information or network activity.

You can consolidate certain sections to summarize particular types of information. 
Consolidated Sections summarize the activity of all devices being monitored as a 
group as opposed to individual devices.

Report sections can be divided into two basic types:

• Summary – Report sections that rank information by bandwidth or 

connections.

• Detailed – Report sections that display all activity with no summary graphs or 

ranking.

The following is a listing of the different types of report sections and consolidated 
sections.

A summary of statistics on one or more log files for a single Firebox.

A detailed list of authenticated users sorted by connection time. Fields 
include: authenticated user, host, start date of authenticated session, start time 
of authenticated session, end time of authenticated session, and duration of 
session.

A table, and optionally a graph, of all accepted connections distributed along 
user-defined intervals and sorted by time. If you chose the entire log file or 
specific time parameters, the default time interval is daily. Otherwise, the time 
interval is based on your selection.

A table, and optionally a graph, of internal and external hosts passing traffic 
through the Firebox sorted either by bytes transferred or number of 
connections.

A table, and optionally a graph, of traffic for each service sorted by connection 
count.