Cisco Cisco Web Security Appliance S170 사용자 가이드

다운로드
페이지 619
 
23-21
Cisco IronPort AsyncOS 7.7.5 for Web User Guide
 
Chapter 23      Web Security Appliance Reports
Client Malware Risk Page
 describes the information on the Client Malware Risk page. 
Client Detail Page for Web Proxy - Clients by Malware Risk 
The Client Details page shows all the web activity and malware risk data for a particular client during 
the specified time range, for entries in the Web Proxy - Client Malware Risk table on the Client Malware 
Risk page. 
Step 1
Navigate to the Reporting > Client Malware Risk page.
Step 2
In the Web Proxy - Client Malware Risk section, click on a user in the “User ID / Client IP Address” 
column.
For information about the items on this page, see 
Table 23-8
Client Malware Risk Report Page Components 
Section
Description
Time Range (drop-down list)
A menu that allows you to choose the time range of the data 
contained in the report. For more information, see the 
Web Proxy: Top Clients by Malware 
Risk
This chart displays the top ten users that have encountered a 
malware risk. 
L4 Traffic Monitor: Malware 
Connections Detected 
This chart displays the IP addresses of the computers in your 
organization that most frequently connect to malware sites. 
This chart is the same as the “Top Client IPs” chart on the 
. See that section for more 
information and chart options. 
Web Proxy: Clients by Malware Risk
The Web Proxy: Clients by Malware Risk table shows detailed 
information about particular clients that are displayed in the Web 
Proxy: Top Clients by Malware Risk section. 
You can click each user in this table to open the 
 that provides 
detailed information for each user. For more information, see the 
Clicking on any of the links in the table allows you to view more 
granular details about individual users and what activity they are 
performing that is triggering the malware risk. For example, 
clicking on the link in the “User ID / Client IP Address” column 
takes you to a User page for that user. 
L4 Traffic Monitor: Clients by Malware 
Risk
This table displays IP addresses of computers in your 
organization that frequently connect to malware sites. 
This table is the same as the “Client Source IPs” table on the 
. For information about working 
with this table, see that section.