Cisco Cisco Content Security Management Appliance M1070 Mode D'Emploi
5-26
AsyncOS 8.1 for Cisco Content Security Management User Guide
Chapter 5 Using Centralized Web Reporting and Tracking
Tip
To customize your view of this report, see
.
Note
•
To generate a more detailed report than this page can provide, see
.
•
If Data Availability is used within a scheduled report for URL Categories, and there are gaps in data
for any of the appliances, the following message is displayed at the bottom of the page: “
for any of the appliances, the following message is displayed at the bottom of the page: “
Some data
in this time range was unavailable.”
If there are no gaps present, nothing appears.
URL Category Set Updates and Reports
The set of predefined URL categories may periodically be updated on your Security Management
appliance, as described in
appliance, as described in
.
When these updates occur, data for old categories will continue to appear in reports and web tracking
results until the data is too old to be included. Report data generated after a category set update will use
the new categories, so you may see both old and new categories in the same report.
results until the data is too old to be included. Report data generated after a category set update will use
the new categories, so you may see both old and new categories in the same report.
If there is overlap between the contents of old and new categories, you may need to examine report
results more carefully to obtain valid statistics. For example, if the “Instant Messaging” and “Web-based
Chat” categories have been merged into a single “Chat and Instant Messaging” category during the time
frame that you are looking at, visits before the merge to sites covered by the “Instant Messaging” and
results more carefully to obtain valid statistics. For example, if the “Instant Messaging” and “Web-based
Chat” categories have been merged into a single “Chat and Instant Messaging” category during the time
frame that you are looking at, visits before the merge to sites covered by the “Instant Messaging” and
Top URL Categories by Blocked and
Warned Transactions
Warned Transactions
This section lists the top URL that triggered a block or warning
action to occur per transaction in a graph format. For example, a
user went to a certain URL and because of a specific policy that
is in place, this triggered a block action or a warning. This URL
then gets listed in this graph as a transaction blocked or warning.
action to occur per transaction in a graph format. For example, a
user went to a certain URL and because of a specific policy that
is in place, this triggered a block action or a warning. This URL
then gets listed in this graph as a transaction blocked or warning.
URL Categories Matched
The URL Categories Matched section shows the disposition of
transactions by URL category during the specified time range,
plus bandwidth used and time spent in each category.
transactions by URL category during the specified time range,
plus bandwidth used and time spent in each category.
If the percentage of uncategorized URLs is higher than 15-20%,
consider the following options:
consider the following options:
•
For specific localized URLs, you can create custom URL
categories and apply them to specific users or group policies.
For more information, see the “Custom URL Categories”
section of the Cisco IronPort AsyncOS for Web Security User
Guide.
categories and apply them to specific users or group policies.
For more information, see the “Custom URL Categories”
section of the Cisco IronPort AsyncOS for Web Security User
Guide.
•
For sites that you feel should be included in existing or other
categories, see
categories, see
Table 5-8
Details on the Web > Reporting > URL Categories Page
Section
Description