Cisco Cisco Web Security Appliance S170 사용자 가이드

다운로드
페이지 34
 
2-5
Cisco Advanced Web Security Reporting Installation, Setup, and User Guide
 
Chapter 2      Reports
Predefined Reports
Predefined Reports
General Reports
These reports are available from links across the top of the application window.
Overview
Users
Websites
URL Categories
Application Visibility
Other Report Categories
Available from the Other Dashboards menu.
L4 Traffic Monitor (summary; WSA reporting only)
SOCKS (summary; WSA reporting only)
Web Tracking (summary); submenu includes:
Proxy Services
SOCKS (detail)
L4 Traffic Monitor (detail)
Security (summary); detail submenu includes:
Anti Malware
Client Malware Risk
Web Reputation Filters
Advanced Malware Protection
File Analysis
You can click the file ID (SHA256) for any entry in the “Completed Analysis Requests from This 
Appliance” table on the File Analysis page (Other Dashboards > Security > File Analysis) to open 
the File Analysis Detail page for that file. The File Analysis Detail page includes a File Analysis 
Server URL text box in which you can specify the File Analysis server for which you wish to view 
data. Generally, this URL is 
https://intel.api.sourcefire.com
 across all WSA versions 
through 8.5.
However, if you used another server for analysis of this particular file (demonstrations perhaps), 
you can change the server URL here to view the details for this file (as identified by its SHA, 
which you clicked to arrive at this drill-down report).
AMP Verdict Updates
Location (summary); detail submenu includes:
Anti Malware by Location
Application Visibility by Location
Overview by Location