Cisco Cisco Content Security Management Appliance M390 Guía Del Usuario
5-8
AsyncOS 9.5.x for Cisco Content Security Management Appliances User Guide
Chapter 5 Using Centralized Web Reporting and Tracking
Web Reporting Page Descriptions
Note
You can schedule reports for most of the web reporting categories, including additional reports for
Extended Top URL Categories and Top Application Types. For more information on scheduling reports,
see the
Extended Top URL Categories and Top Application Types. For more information on scheduling reports,
see the
About Time Spent
The Time Spent column in various tables represents the amount of time a user spent on a web page. For
purposes of investigating a user, the time spent by the user on each URL category. When tracking a URL,
the time spent by each user on that specific URL.
purposes of investigating a user, the time spent by the user on each URL category. When tracking a URL,
the time spent by each user on that specific URL.
Once a transaction event is tagged as ‘viewed’, that is, a user goes to a particular URL, a ‘Time Spent’
value will start to be calculated and added as a field in the web reporting table.
value will start to be calculated and added as a field in the web reporting table.
To calculate the time spent, AsyncOS assigns each active user with 60 seconds of time for activity during
a minute. At the end of the minute, the time spent by each user is evenly distributed among the different
domains the user visited. For example, if a user goes to four different domains in an active minute, the
user is considered to have spent 15 seconds at each domain.
a minute. At the end of the minute, the time spent by each user is evenly distributed among the different
domains the user visited. For example, if a user goes to four different domains in an active minute, the
user is considered to have spent 15 seconds at each domain.
For the purposes of the time spent value, considering the following notes:
•
An active user is defined as a user name or IP address that sends HTTP traffic through the appliance
and has gone to a website that AsyncOS considers to be a “page view.”
and has gone to a website that AsyncOS considers to be a “page view.”
•
AsyncOS defines a page view as an HTTP request initiated by the user, as opposed to a request
initiated by the client application. AsyncOS uses a heuristic algorithm to make a best effort guess
to identify user page views.
initiated by the client application. AsyncOS uses a heuristic algorithm to make a best effort guess
to identify user page views.
Units are displayed in Hours:Minutes format.
Web Reporting Overview
The Web > Reporting > Overview page provides a synopsis of the activity on your Web Security
appliances. It includes graphs and summary tables for the incoming and outgoing transactions.
appliances. It includes graphs and summary tables for the incoming and outgoing transactions.
At a high level the Overview page shows you statistics about the URL and User usage, Web Proxy
activity, and various transaction summaries. The transaction summaries gives you further trending
details on, for example suspect transactions, and right across from this graph, how many of those suspect
transactions are blocked and in what manner they are being blocked.
activity, and various transaction summaries. The transaction summaries gives you further trending
details on, for example suspect transactions, and right across from this graph, how many of those suspect
transactions are blocked and in what manner they are being blocked.
The lower half of the Overview page is about usage. That is, the top URL categories being viewed, the
top application types and categories that are being blocked, and the top users that are generating these
blocks or warnings.
top application types and categories that are being blocked, and the top users that are generating these
blocks or warnings.
Scheduled Reports
Allows you to schedule reports for a specified time range. For more
information, see the
information, see the
.
Archived Reports
Allows you to archive reports for a specified time range. For more
information, see the
information, see the
.
Table 5-1
Web Reporting Tab Details
Web Reporting Menu
Action