Viewing Reports

The Reports page shows network analysis, security analysis, and infected devices reports by a selected time frame (monthly, weekly, daily, and hourly).

These elements influence the times shown in reports:

  • Rounding off of time

  • System reboot

Rounding Off of Time

The times shown in generated reports are rounded down:

  • For hourly reports - At one minute intervals. For example, if you generate a report at 10:15:45 AM, the report represents data from 9:15 to 10:15.

  • For daily reports - At hourly intervals. For example, if you generate a report at 10:15 AM, the report represents data from the last 24 hours ending at 10:00 AM of the current day.

  • For weekly reports - At four hour intervals, starting with 00:00, 04:00, 08:00 and so on. For example, if you generate a report at 11:55 AM, the report represents data from the last week ending at 08:00 AM of the current day.

  • For monthly reports - At four hour intervals, starting with 00:00, 04:00, 08:00, 12:00 and so on. For example, if you generate a report at 11:15 AM, the report represents data from the last month ending at 08:00 AM of the current day.

System Reboot

In the first 24 hour cycle after an appliance starts up (after installation or an update), the system adds one more time interval to the delta of the next applicable report interval.

For example, for weekly reports that are generated at pair hour intervals, the appliance requires 1 more hours plus the delta for the first applicable pair hour.

  • For an appliance that started at 00:00 AM - The first weekly report is generated at 04:00 AM. The total of 4 hours derives from the first delta of the first applicable pair hour which is 02:00 and the added 2 hours. The total wait is 4 hours.

  • For an appliance that started at 01:59 AM - The first weekly report is generated at 04:00 AM. The generated time derives from the delta of the first applicable pair hour which is 02:00 and the added 2 hours. The total wait is 2 hours.

After you start up an appliance, reports are generated:

  • Hourly reports - 2-3 minutes from startup.

  • Daily reports - 1-2 hours from startup.

  • Weekly reports - 2-4 hours from startup.

  • Monthly reports - 4-8 hours from startup.

Note - Only the last generated report for each report type is saved in the appliance. When you generate a new report, you override the last saved report for the specified type.

To generate a report:

Click the applicable time frame link at the top of the page (Monthly, Weekly, Daily or Hourly).

The line below the links shows the selected report and its time frame. To refresh the data shown, click Generate.

The report includes these sections:

  • Executive Summary

  • Table of Contents

  • Report Pages

Executive Summary

The first page of the report is the executive summary and shows:

  • The number of Anti-Bot, Anti-Virus, and Threat Emulation malware detected by the Security Gateway and the number of IPS attacks.

  • Top bandwidth consuming statistics by category, site, and user. You can click the Top category, Top site, or Top user link to get to the applicable report page. It also shows Bandwidth Usage by Applications statistics for the top 5 applications in a doughnut chart and total traffic received and sent.

  • The number of infected devices, servers, and recently active infected devices.

  • The number of high risk applications, the most used high risk applications, and the top users of high risk applications.

  • The Security Gateway name, version, and MAC address.

Table of Contents

The table of contents contains links to the network analysis, security analysis, and infected devices reports. Click a link to go directly to the selected section.

Report Pages

Each report page shows a detailed graph, table, and descriptions.

Note - This page is available from the Home and Logs & Monitoring tabs.