Reports - Stormshield SN series Configuration Manual

Search for this vulnerability in logs: this search is conducted in the Logs section, in the
l
Vulnerabilities view and by keeping the monitored period.

Reports

WEB
The activity analyzed in the Web category is the combined activity for all queried sites, meaning
those belonging to the company's internal networks or those hosted on the internet. These
reports relate to HTTP and HTTPS traffic.
For reports relating to Sites , possible interactions with the elements and the legend are the
querying of a URL's category and direct access to the URL. As for the Top Web searches, it allows
relaunching the search via Google.
Top most visited web sites,
These values are evaluated by the number of hits sent to the HTTP server, for the download of
files needed for displaying web pages.
Top most visited web domains
Through a mechanism that aggregates the number of web servers queried, the previous report is
built according to web domains, which makes it possible to avoid dividing them..
Top most consulted web categories
For this report, the URL filtering module has to be enabled. Keep in mind that the sites queries
include those belonging to the internal network (category Private IP Addresses).
Top web sites by exchanged volume
This report is based on the volumes of data exchanged, both sent and received.
Top web domains by exchanged volume
Through a mechanism that aggregates the number of web servers queried, the previous report is
built according to web domains, which makes it possible to avoid dividing them..
Top web categories by exchanged volume
Traffic is scanned against rules on which a URL filter has been applied (Security inspection). It
relates to volumes of data exchanged, both sent and received.
Top users by volume exchanged,
Authentication has to be configured (refer to the chapter Authentication in this Guide). It relates to
volumes of data exchanged, both sent and received.
Top most blocked web sites.
This report relates to sites that have been blocked by the ASQ engine or by URL filtering if it has
been enabled (Security inspection).
Top most blocked web domains
Through a mechanism that aggregates the number of web servers queried, the previous report is
built according to web domains, which makes it possible to avoid dividing them..
Top most blocked web categories
The URL filtering inspection is required in order to obtain these categories. This report relates to
sites that have been blocked by the ASQ engine or by URL filtering if it has been enabled
(Security inspection).
Top web searches
These values relate to requests sent over the search engines Google, Bing and Yahoo.
Page 298/448
SNS - USER CONFIGURATION MANUAL V.3
sns-en-user_configuration_manual-v3 - Copyright © Stormshield 2016
REPORTS