How to enable the firewall to see ‘Web Categories’ in Reports and / or ‘Web Activity’ reports in Analytics

Description

Configuring firewall to be able to ‘Web Categories’ in Reports and / or ‘Web Activity’ reports in CSC or CGMS Reporting/Analytics.

Capture Security center(CSC) generates report data based on the IPFIX packets/flows received from the firewall.  Hence firewall needs to be configured for the corresponding flows.

Resolution

Prerequisites:

  • Firewall should have license for CSC CSC Management and Reporting/CSC Analytics.
  • Firewall should have license for Comprehensive/Advanced Gateway Security Suite (CGSS/AGSS)

Image

NOTE: This article illustrates the example with the CFS Default Policy and Action Objects, same is applicable for custom CFS Policies and Action Objects.

 2) Go to Objects | Content Filter Objects | CFS Action Objects | Edit CFS Default Action and check "Enable Flow Reporting".

Image

Default CFS Policy:

Image EXAMPLE: Here are the Sample Reports for Web Categories and Web Activities:

 Web Categories under Reporting:

 

 Web Activities under Analytics:

Related Articles

  • SonicWall NSM FQDN And IP List
    Read More
  • How can I enable Zero Touch?
    Read More
  • How to add a firewall to NSM manually
    Read More
not finding your answers?