Network Security Manager On-Premises Administration Guide

Table of Contents

Creating a Rule for Capture Threat Assessment Reports

You can add a report rule at Tenant level only.

To create a Capture Threat Assessment (CTA) report rule

  1. Navigate to Manager View | Home > Reports > Rules page.
  2. Click the Add icon.
  3. Select the Reporting And Analytics > CTA as a report type.
  4. Click Next.
  5. Provide REPORT CONFIGURATION details:

    1. Enter a unique Report Name to identify in the list.

      Maximum 40 characters are allowed and special symbols are not allowed.

    2. Enter a Report Description for your reference. This is optional.
    3. Change the Cover Title description if you want.
    4. Select All under the REPORTS.

  6. Click Next.
  7. Check the boxes of the devices to be added in the rule.

    Check the box in the table header to select all devices.

  8. Click Next.
  9. Set the DELIVERY CONFIGURATION.

    1. Select the Run Type:

      • Select Scheduled to take auto backup of the device configuration at a specific time interval.
      • Select On-Demand to create configuration and Run the schedule manually as and when needed.
    2. Set the Delivery Interval, Daily, Weekly, or Monthly.

      For Weekly delivery interval,

      • Select the Weekly Report Day, which is the day on which the report will be generated.

      • Select the Start Day of the week.

      Report will be generated for 7 days only.

      For Monthly delivery interval,

      • Select the Monthly report Date, the date on which the report will be generated.
    3. Select the Schedule Time to take backup of the device configuration.
    4. Set Day or Date on which the backup should be taken.
    5. Select the Report Data Time Zone.

      The time zone set here is used to fetch report data.

    6. Set the Delivery Type.

      You can select both options also.

      Archive By the default, Archive is selected. If you select this option, report will be generated per the schedule and store the report under Saved Reports.
      Email

      If you select this option, report will be generated in PDF format according to the schedule and send the report to the email defined in Email Destination field.

      Reports (PDF files) exceeding 10 MB cannot be attached to email notifications. You can download Reports (PDF files) exceeding 10 MB from the Saved Reports.

    7. Enter the following information if you select Delivery Type as Email or both.

      • Select the Email Destination to receive the reports.

        Administrator By the default, Administrator is selected. You can leave as it is if you want to send the reports to the Administrator.
        AdhocUser Select AdhocUser if you want add other users to send reports. You can add multiple email addresses separated by a comma in the Email ID field.
      • Enter Email Subject.
      • Enable Zip Report to receive the compressed report in the email.

  10. Click Next.
  11. Review report settings and click Save.

    A success message is displayed. The newly created report is displayed on the page.

You can also create a report rule for a firewall in the Firewall View | Home > Reports > Rules page. The procedure for creating scheduled reports in the Firewall View is similar to creating a report rule in the Manager View.