Cisco Cisco Web Security Appliance S170 Guida Utente
23-5
Cisco IronPort AsyncOS 7.5.7 for Web User Guide
Chapter 23 Reporting
Using the Reporting Tab
Note
Not every column is available for every report page. Click the Columns link for each report page to view
the available columns.
the available columns.
describes the columns available when working with reports.
Table 23-2
Report Column Descriptions
Column Name
Description
Domain or Realm
The domain or realm of the user displayed in text format.
User ID or Client IP
The username or client IP address of the user displayed in text format.
Bandwidth Used
The amount of bandwidth that is used by a particular user or action.
Bandwidth units are displayed in Bytes or percentage.
Bandwidth units are displayed in Bytes or percentage.
Bandwidth Saved by
Blocking
Blocking
The amount of bandwidth that has been saved due to blocking certain
transactions. Bandwidth units are displayed in Bytes
transactions. Bandwidth units are displayed in Bytes
Time Spent
The amount of time spent on a web page. For purposes of investigating a
user, the time spent by the user on each URL category. When tracking a
URL, the time spent by each user on that specific URL.
user, the time spent by the user on each URL category. When tracking a
URL, the time spent by each user on that specific URL.
To calculate the time spent, AsyncOS assigns each active user with 60
seconds of time for activity during a minute. At the end of the minute, the
time spent by each user is evenly distributed among the different domains
the user visited. For example, if a user goes to four different domains in an
active minute, the user is considered to have spent 15 seconds at each
domain.
seconds of time for activity during a minute. At the end of the minute, the
time spent by each user is evenly distributed among the different domains
the user visited. For example, if a user goes to four different domains in an
active minute, the user is considered to have spent 15 seconds at each
domain.
For the purposes of the time spent value, considering the following notes:
•
An active user is defined as a username or IP address that sends HTTP
traffic through the appliance and has gone to a website that AsyncOS
considers to be a “page view.”
traffic through the appliance and has gone to a website that AsyncOS
considers to be a “page view.”
•
AsyncOS defines a page view as an HTTP request initiated by the user,
as opposed to a request initiated by the client application. AsyncOS
uses a heuristic algorithm to make a best effort guess to identify user
page views.
as opposed to a request initiated by the client application. AsyncOS
uses a heuristic algorithm to make a best effort guess to identify user
page views.
Units displayed in Hours:Minutes format.
Allowed URL Category
The number and type of categories that have been allowed. Units displayed
in transaction type.
in transaction type.
Monitored URL
Category
Category
The number and type of categories that are being monitored. Units displayed
in transaction type.
in transaction type.
Warned URL Category
The number and type of categories that have initiated a warning. Units
displayed in transaction type.
displayed in transaction type.
Blocked by URL
Category
Category
The transaction that has been blocked due to URL Category. Units displayed
in transaction type.
in transaction type.
Blocked by Application
or Application Type
or Application Type
The application that has been blocked due to application type. Units
displayed in transaction type.
displayed in transaction type.
Blocked by Web
Reputation
Reputation
The transaction that has been blocked due to web reputation. Units
displayed in transaction type.
displayed in transaction type.