WatchGuard Technologies FireboxTM System 4.6 - Manual (Page 125)

User Guide 115
Report sections and consolidated sections
Manually running a report
At any time, you can run one or more reports using Historical Reports. From
Historical Reports:
1 Enable the checkbox next to each report you would like to generate.
2 Click Run.
Report sections and consolidated sections
You can use Historical Reports to build a report that includes one or more sections.
Each section represents a discrete type of information or network activity.
You can consolidate certain sections to summarize particular types of information.
Consolidated Sections summarize the activity of all devices being monitored as a
group as opposed to individual devices.
Report sections can be divided into two basic types:
• Summary – Report sections that rank information by bandwidth or
connections.
• Detailed – Report sections that display all activity with no summary graphs or
ranking.
The following is a listing of the different types of report sections and consolidated
sections.
Firebox Statistics
A summary of statistics on one or more log files for a single Firebox.
Authentication Detail
A detailed list of authenticated users sorted by connection time. Fields
include: authenticated user, host, start date of authenticated session, start time
of authenticated session, end time of authenticated session, and duration of
session.
Time Summary – Packet Filtered
A table, and optionally a graph, of all accepted connections distributed along
user-defined intervals and sorted by time. If you chose the entire log file or
specific time parameters, the default time interval is daily. Otherwise, the time
interval is based on your selection.
Host Summary – Packet Filtered
A table, and optionally a graph, of internal and external hosts passing traffic
through the Firebox sorted either by bytes transferred or number of
connections.
Service Summary
A table, and optionally a graph, of traffic for each service sorted by connection
count.