Creating a Rule for Capture Threat Assessment Reports

You can add a report rule at Tenant level only.

To create a Capture Threat Assessment (CTA) report rule

1. Navigate to Manager View | Home > Reports > Rules page.
2. Click the Add icon.
3. Select the Reporting And Analytics > CTA as a report type.
4. Click Next.

5. Provide REPORT CONFIGURATION details:

   1. Enter a unique Report Name to identify in the list.

      Maximum 40 characters are allowed and special symbols are not allowed.

   2. Enter a Report Description for your reference. This is optional.
   3. Change the Cover Title description if you want.

   4. Select All under the REPORTS.

      

6. Click Next.

7. Check the boxes of the devices to be added in the rule.

   Check the box in the table header to select all devices.

   

8. Click Next.

9. Set the DELIVERY CONFIGURATION.

   Advanced Settings are not available and disabled for this rule.

   

   1. Select the Run Type:

      • Select Scheduled to generate the report automatically at a specific time interval, and configure the following:

        • Select the Delivery Interval: Daily, Weekly, or Monthly.

          For Daily delivery interval: No additional configuration is required. The report is generated once every day.

          For Weekly delivery interval:

          • Select the Weekly Report Day, which is the day of the week on which the report will be generated.
          • Select the Start Day of the week to define the first day of the reporting period.
          • The report covers data for 7 days only, starting from the configured Start Day of the week.

          For Monthly delivery interval: Select the Monthly report Date, which is the day of the month (1–31) on which the report will be generated. The report covers data for the entire preceding month.

        • Select the Report Data Time Zone. The time zone set here is used to fetch report data.
        • Select the Schedule Time at which the report will be generated.

      • Select On-Demand to generate the report manually as and when needed, and configure the following:

        • Set the Time Period by selecting the time unit from the dropdown and adjusting the slider to define the data range for the report.
        • Select the Report Data Time Zone. The time zone set here is used to fetch report data.

   2. Set the Delivery Type.

      You can select both options.

      Archive	By default, Archive is selected. The report is stored under Saved Reports.
      Email	The report is generated in PDF format and sent to the email address defined in the Email Destination field. Reports (PDF files) exceeding 10 MB cannot be attached to email notifications. You can download reports exceeding 10 MB from Saved Reports.

   3. Enter the following information if you select Delivery Type as Email or both.

      • Select the Email Destination to receive the reports.

        Administrator	By default, Administrator is selected. The report is sent to the administrator's email address.
        AdhocUser	Select AdhocUser to add recipients other than the administrator.

        If AdhocUser is selected, enter the recipients' email addresses in the Email ID field. Use a semicolon to separate multiple addresses.

      • Enable Blind Carbon Copy Recipients (bcc) to send a blind copy of the report email to additional recipients.
      • Enter Email Subject.
      • Enter Email Body if you want to include any additional information about the report.
      • Enable Zip Report to receive the compressed report in the email.
10. Click Next.

11. Review report settings and click Save.

    

    A success message is displayed. The newly created report is displayed on the Rules page.

You can also create a report rule for a firewall in the Firewall View | Home > Reports > Rules page. The procedure for creating scheduled reports in the Firewall View is similar to creating a report rule in the Manager View.