Consolidated Sections - Watchguard Firebox X1000 User Manual

Chapter 14: Generating Reports of Network Activity
Denied Authentication Detail

Consolidated sections

Network Statistics
Time Summary – Packet Filtered
Host Summary – Packet Filtered
Service Summary
Session Summary – Packet Filtered
250
A detailed list of failures to authenticate, sorted by
time. The fields are Date, Time, Host, and User.
A summary of statistics on one or more log files for
all devices being monitored.
A table, and optionally a graph, of all accepted
connections distributed along user-defined
intervals and sorted by time. If you choose the
entire log file or specific time parameters, the
default time interval is daily. Otherwise, the time
interval is based on your selection.
A table, and optionally a graph, of internal and
external hosts passing packet-filtered traffic, sorted
either by bytes transferred or number of
connections.
A table, and optionally a graph, of traffic for all
services sorted by connection count.
A table, and optionally a graph, of the top
incoming and outgoing sessions, sorted either by
byte count or number of connections. The format of
the session is: client -> server : service. If the
connection is proxied, the service is represented in
all capital letters. If the connection is packet
filtered, Historical Reports attempts to resolve the
server port to a table to represent the service name.
If resolution fails, Historical Reports displays the
port number.
WatchGuard Firebox System