Руководство Пользователя для Cisco Cisco Content Security Management Appliance M160

You can schedule reports for most of the web reporting categories, including additional reports for 
Extended Top URL Categories and Top Application Types. For more information on scheduling reports, 
see the 

The Time Spent column in various tables represents the amount of time a user spent on a web page. For 
purposes of investigating a user, the time spent by the user on each URL category. When tracking a URL, 
the time spent by each user on that specific URL.

Once a transaction event is tagged as ‘viewed’, that is, a user goes to a particular URL, a ‘Time Spent’ 
value will start to be calculated and added as a field in the web reporting table. 

To calculate the time spent, AsyncOS assigns each active user with 60 seconds of time for activity during 
a minute. At the end of the minute, the time spent by each user is evenly distributed among the different 
domains the user visited. For example, if a user goes to four different domains in an active minute, the 
user is considered to have spent 15 seconds at each domain.

For the purposes of the time spent value, considering the following notes:

An active user is defined as a user name or IP address that sends HTTP traffic through the appliance 
and has gone to a website that AsyncOS considers to be a “page view.”

AsyncOS defines a page view as an HTTP request initiated by the user, as opposed to a request 
initiated by the client application. AsyncOS uses a heuristic algorithm to make a best effort guess 
to identify user page views.

Units are displayed in Hours:Minutes format. 

The Web > Reporting > Overview page provides a synopsis of the activity on your Web Security 
appliances. It includes graphs and summary tables for the incoming and outgoing transactions.

At a high level the Overview page shows you statistics about the URL and User usage, Web Proxy 
activity, and various transaction summaries. The transaction summaries gives you further trending 
details on, for example suspect transactions, and right across from this graph, how many of those suspect 
transactions are blocked and in what manner they are being blocked.

The lower half of the Overview page is about usage. That is, the top URL categories being viewed, the 
top application types and categories that are being blocked, and the top users that are generating these 
blocks or warnings.

Allows you to schedule reports for a specified time range. For more 
information, see the 

.

Allows you to archive reports for a specified time range. For more 
information, see the 

.