Cisco Cisco Web Security Appliance S390 사용자 가이드

When the Web Security appliance is managed by a Security Management appliance, you can choose 
which appliance displays reports on the web traffic that is processed by the Web Security appliance. By 
default, the Web Security appliance maintains the reports (Local Reporting). However, you can 
configure the Web Security appliance so that the Security Management appliance maintains the reports 
by enabling Centralized Reporting. You might want to enable Centralized Reporting when the Security 
Management appliance manages multiple Web Security appliances. This gives you a centralized view of 
web traffic across all Web Security appliances.

When you enable Centralized Reporting, only the System Capacity and System Status reports are 
available on the Web Security appliance. To view the other reports, connect to the Security Management 
appliance. The Web Security appliance no longer stores data for the other reports. 

To enable Centralized Reporting:

Navigate to the Security Services > Reporting page, and click Edit Settings.

Choose Centralized Reporting.

Submit and commit your changes.

You can schedule reports to run on a daily, weekly, or monthly basis. Scheduled reports can be 
configured to include data for the previous day, previous seven days, or previous month. Alternatively, 
you can include data for a custom number of days (from 2 days to 100 days) or a custom number of 
months (from 2 months to 12 months). 

Regardless of when you run a report, the data is returned from the previous time interval (hour, day, 
week, or month). For example, if you schedule a daily report to run at 1AM, the report will contain data 
from the previous day, midnight to midnight (00:00 to 23:59). 

You can schedule reports for the following types of reports:

Overview

Users

Web Sites

URL Categories

Application Visibility

Anti-Malware

Client Malware Risk

Web Reputation Filters

L4 Traffic Monitor

Reports by User Location 

System Capacity