Available SRA Report Types in GMS/Analyzer

03/26/2020 1,045 People found this article helpful 197,654 Views

Download

Print

Share

• LinkedIn
• Twitter
• Facebook
• Email
• Copy URL The link has been copied to clipboard

Description

Available SRA Report Types in GMS/Analyzer

Resolution

To view the available types of reports for SRA Web Application Firewalls (WAF), perform the following steps:

1. Log into your Analyzer management console.

2. Click the SRA tab.

The following types of reports are available:

• Global Level Reports:
  • Data Usage
    • Summary: connections per SRA appliance
  • WAF
    • Summary: connections listed by appliance for one day (default)
  • General
    • Status: number of units in the system and their Analyzer license status
• Unit Level Reports

Clicking on hyperlinks in the Unit Level Reports takes you to the Analyzer Log, where you can view more information.

• Data Usage
  • Timeline: total connections listed by hour
  • Users: connections listed by user
• User Activity
  • Details: a detailed report of activity for the specified user
• Access Method
  • Summary: connections per connection protocol (HTTPS, NetExtender, etc)
  • Users: top users by protocol
• Authentication
  • User login: authenticated user logins by time and IP protocol. User Login reportscombine admin users with all other users in the same report.
  • Failed login: Failed login attempts with initiator IP address.
• WAF
  • Timeline: total threats detected per appliance
  • Threats Detected: top threats detected per day
  • Threats Prevented: top threats prevented per day
  • Apps Detected: top applications detected per day
  • Apps Prevented: top applications blocked per day
  • Users Detected: number of concurrent users per day
  • Users Prevented: number of blocked users prevented per day
• Connections
  • Timeline: a summary of offloaded connections under the group node per SRA appliance, listed for one day.
  • Applications: offloaded connections by application
  • Users: offloaded connections by user
• Analyzers
  • Log Analyzer: logs of all activity
• Configuration: menus allow setting Report display options
  • Log Analyzer Filter: applies filters to the system logs uploaded to the reporting database
• Events: these menus allow setting options
  • Alert Settings: provides search functions, adding or removing Alerts
  • Current Alerts: displays current applicable Alerts.Custom

Note: In GMS there is one more report available - Up/Down Status.
This report is being generated based on heartbeats that GMS is receiving form SRA.

Related Articles

• Specific syslog IDs are not seen in Analytics reports
• Upgrading to Analytics 2.5.0.4
• How to upgrade firmware for a group of firewalls in NSM

Categories

• Management and Reporting > GMS