Home

8e6 Technologies ER HL/SL Network Card User Manual

Contents

1. 44444HHnRnnennnnnn nen nenn nn nenn nn 13 How to generate a Summary Drill Down Report uuu 44eessssnnnnnnnnssnnnnnnnnnnnnnnnnnnnnnnnn san 14 Summary Drill Down Report navigation sssrss4nneeeennnnnennnennnnnnnnnennnnnnnnnnnnnnnnnnennnn nennen 15 Ee ee Et EE 15 Filter columns and buttons 02000 oe e cece cece ence cece teeter eee ee tees caaaaaaeaeeeeeeeeeeeeeeeeesenseeaaeees 15 COUNT COIUMIAS 2 32 22 cones deeg ee egent a ied uaa cee aaa 16 Sort records by another column nn 17 t EU Lee 17 Back DUON in ag Sege e Ee Ee Cen nina 17 Record navigation feld 17 Detail Drill Down Report navigation sessnnnnennnsnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnn nn 18 Report type col mNs n 2220 22a ea nel anlfem 18 Page links suisia RR ken TT AE E a r ENA 19 Evalation Steps EE 20 Step 1 Select a specific user by Category nnesesensnnnennnnnnnnnnnnennnnnnnnnnnnnnnnnnnnnn nenn 20 Step 2 Sort by Filter Action column 20 step 3 Full URL review en meinen 20 Step 4 Sort by Content Type uumnnsssnsnnnenannsnnnnnnnnnannnnnnnnnannnnnnnanannnnnnnannnannnnnnnnnnnn 21 Step 5 Sort by Search String AAA 21 Dep TECHNOLOGIES ENTERPRISE REPORTER EVALUATION GUIDE iii CONTENTS Create a Custom Report for a specific user EE 22 How to use the Custom Report Wizard ss nssssesensseesseeettrtrtrrterssttsttttrnrtnnnnnnnrerttrtt rnn nn nnne 22 Genera
2. 9 18 2006 4 29 57 PM 866 Technologies Enterprise Reporter Web Page 1 of 32 Fiter None Generated by deta Sample Category Users report 30 Dep TECHNOLOGIES ENTERPRISE REPORTER EVALUATION GUIDE CONFIGURE TEST THE ENTERPRISE REPORTER APPENDIX A SAMPLES OF COMMONLY USED REPORTS Sample Report 2 Top 20 Sites by User Site This report will document the top 20 sites visited for every user in the organization This is a useful tool in monitoring the high level Web activity of users and can help fine tune sites the administrator allows users to access Sort Order Page Count descending User Sites Top 20 Sites by Page Count From 9 18 2006 To 9 18 2006 User Yasmin Sites E 216 239 37 125 atwola com 207 46 106 47 google com 207 46 106 66 207 46 26 109 yahoo com topwebcomics com googlesyndication com 205 188 8 6 salesforce com 64 12 26 164 216 155 193 170 msn com nuklearpower com 207 46 106 82 wikipedia org 216 155 193 151 coremetrics com atdmt com 2022202202202 D EE EES MA A M B Total for Yasmin Site Count 20 sorted by Page Count descending User RD RPATE Sites google com myfamily com 9 18 2006 4 33 40 PM 866 Techndogies Enterprise Reporter Web Page 1 of 21 Filter None Generated by deta Sample User Sites report 8E6 TECHNOLOGIES ENTERPRISE REPORTER EVALUATION GUIDE 31 CONFIGURE TEST THE ENTERPRISE REPORTER APPENDIX A SAMPLES OF COMMONLY U
3. Month to Yesterday Year to Yesterday Last Week Last Weekend Current Week Last Month For evaluation purposes select Last Week 5 Choose the break type output type and format Break type available selections are based on the type of report generated There are no break types available for specific user reports e Output type choose either E Mail As Attachment or E Mail As Link e Format selections include MS DOS Text PDF Rich Text Format HTML Comma Delimited Text and Excel English 6 The Hide Un Identified IPs checkbox is de selected by default if the checkbox by this same name was deselected in the Options window To change the selec tion in this field click the Hide Un Identified IPs checkbox to remove or Dep TECHNOLOGIES ENTERPRISE REPORTER EVALUATION GUIDE 25 CONFIGURE TEST THE ENTERPRISE REPORTER CREATE A CUSTOM REPORT FOR A SPECIFIC USER add a check mark in the checkbox By entering a check mark in this checkbox activity on machines not assigned to specific end users will not be included in report views Changing this selection will not affect the setting previously saved in the Options window For purposes of this evaluation leave this checkbox de selected 7 To include the specified column in the report click any of the following check boxes listed below For purposes of this evaluation select
4. e If Daily is selected in the From Date and To Date fields make a selection for the month 1 12 day 1 31 and year 1998 2009 8E6 TECHNOLOGIES ENTERPRISE REPORTER EVALUATION GUIDE 35 CONFIGURE TEST THE ENTERPRISE REPORTER APPENDIX B EXPORT AND SAVE SUMMARY REPORTS 36 5 Choose the break type output type and format Break type available selections are based on the type ofreport generated There are no break types available for specific user reports e Output type choose either E Mail As Attachment or E Mail As Link e Format selections include MS DOS Text PDF Rich Text Format HTML Comma Delimited Text and Excel English 6 The Hide Un Identified IPs checkbox is de selected by default if the checkbox by this same name was deselected in the Options window NOTE The Options window is accessible via Default Options in the Settings menu See the Default Options sub section in Chapter 2 Customizing the Client of the Enterprise Reporter Web Client User Guide for more information about the Hide Un Identified IPs option To change the selection in this field click the Hide Un Identified IPs checkbox to remove or add a check mark in the checkbox By entering a check mark in this checkbox activity on machines not assigned to specific end users will not be included in report views Changing this selection will not affect the setting previously s
5. Body Save and Schedule Save and Run Save Only E Done an Internet Save Custom Report option Summary report 2 In the Save Name field enter a name for the report This name will display in the Report Name pull down menu in the Saved Custom Reports option acces sible via the Custom Reports menu TIP The Copy Ctrl C and Paste Ctrl V functions can be used in the fields in the Save Custom Report pop up box 3 In the Description field enter the report description This description will display in the Report Description field in the Saved Custom Reports option accessible via the Custom Reports menu 4 The date scope for the current report view displays in the From Date and To Date fields If you wish to change the date scope make a selection from the following choices in the Date Scope pull down menu Today Month to Date Monthly Year to Date Daily Yesterday Month to Yesterday Year to Yesterday Last Week Last Weekend Current Week Last Month The From Date and To Date fields become unavailable if one of the following selections is made Today Month to Date Year to Date Yesterday Month to Yesterday Year to Yesterday Last Week Last Weekend Current Week Last Month e If Monthly is selected in the From Date and To Date fields make a selection for the month 1 12 and year 1998 2009
6. For example if a user visits www espn com www msn com and www foxsports com that user will have visited three pages Ifthat same user additionally visits www espn com scores the total number of sites visited would still count as three and not as four because the latter page is on the original ESPN site that was already counted Page Count displays the total number of pages visited A user may visit only one site but visit 20 pages on that site If a user visits a page with pop up ads these items would add to the page count If a page has banner ads that link to other pages these items also would factor into the page count In categories that use a lot of pop up ads porn gambling and other related sites the page count usually exceeds the number of objects per page By clicking the arrow to the right of any record in this column the custom report view displays data for all pages visited including hyperlinks to those pages this is covered in greater detail in the next section Detail Drill Down Report naviga tion e TIP If the date range that was specified at the Date Scope field is outside the scope of live data currently stored on the Server when clicking the arrow button a warning message displays to inform you that if you wish to proceed the report will take a longer amount of time to generate Object Count displays the number of objects on a Web page All images graphics multimedia items and text items c
7. amp Image Search Engines 1 97 Bj Reviewed Miscellaneous 1 95 E 5 Others Combined 5 82 Report Generated by manager Date 5 9 2007 Time 10 37 10 AM Page tot Sample Pie Chart Canned Report The header of the generated canned report includes the date range Report Type and criteria Details The body of the first page of the report includes the following information Bar chart name of category username username path URL or site IP address or user group name and corresponding bar graph e Pie chart color coded pie graph and key showing a maximum of 15 categories or user groups Any categories or user groups with page counts totaling less than one percent are grouped together under the Others Combined label The footer of the report includes the username of the person who generated the report Report Generated by the Date and Time the report was generated and Page number 12 Dep TECHNOLOGIES ENTERPRISE REPORTER EVALUATION GUIDE CONFIGURE TEST THE ENTERPRISE REPORTER USE ENTERPRISE REPORTER DRILL DOWN REPORTS The body of the following page s of the report includes Count columns and corre sponding totals The Grand Total and Count display at the end of the report NOTE See Summary Drill Down Report navigation for information about report elements referenced above How to export a Canned Report From the open PDF file the canned report can be exported in some of the following ways e p
8. 20 Users by Blocked Request bar chart report that shows the end users with the most attempts to view blocked content as determined by the filter policy Top 20 Categories by Page Count bar chart report based on the total page count for each filtering category set up in the Category Description list from the Settings menu Top 20 Users by Page Count bar chart report based on each end user s total page count Top 20 Users by Malware Hit Count bar chart report based on each end user s total hit count from the following categories in the Security Internet Productivity and Internet Communication Instant Messaging category groups BotNet Malicious Code Virus Bad Reputation Domains Spyware Adware and IRC Top 20 Sites by Page Count bar chart report based on the total page count for the most popular sites accessed by end users Top 20 User Groups by Page Count bar chart report based on the total page count for each user group set up in the User Groupings list from the Settings menu Category Comparison pie chart report based on the total page count for each filtering category set up in the Category Description list from the Settings menu User Group Comparison pie chart report based on the total page count for each user group set up in the User Groupings list from the Settings menu Once you have obtained an overview of Internet activity using canned reports you can drill down to access more detailed information a
9. 30 seconds a user could show an incredibly high page count and many minutes even though only one page was opened by that user Sort records by another column To sort records in ascending descending order by a specified column click that column s header Category Count IP Count User Count Site Count Page Count Object Count or Time HH MM SS Click the same column header again to sort records for that column in the reverse order Navigation tips Back button Click the Back button in the toolbar of the browser window to return to a previous page in the current report Record navigation field The total number of records displays to the right of the Record navigation field located above the rows of records Record JM 1 Eloge This indicator helps you determine how long it will take to generate a report view or to print a report If there are many records you may wish to filter your results to reduce the time it will take to process the report The selected record is designated by the record number displayed in the Record navigation field and by an arrow to the left of a record in the body of a report view To select another record do any of the following e click the specified row to display the arrow preceding that record and the record number in the Record navigation field e inthe Record navigation field enter a new record number in the white box between the arrow buttons to go to that record Dep TECHN
10. Export Drill Down Report pop up box via the Export Report button and in the Save Custom Report pop up box via the Save Report button At the Format pull down menu choose the format for the report MS DOS Text PDF Rich Text Format HTML Comma Delimited Text Excel English 8E6 TECHNOLOGIES ENTERPRISE REPORTER EVALUATION GUIDE 39 CONFIGURE TEST THE ENTERPRISE REPORTER APPENDIX B EXPORT AND SAVE SUMMARY REPORTS 40 NOTES For pie or bar chart selections PDF displays grayed out since this is the only output format available for these report types Information on report formats can be found in the Methods for exporting a Drill Down Report sub section For double break reports only 3 A The Amount shown and Records fields are available in the Export Drill Down Report pop up box via the Export Report button and in the Save Custom Report popup box via the Save Report button These fields are deactivated by default NOTE These fields also display in Save Custom Report under the label For single break reports only Amount shown field The Amount shown field is used for specifying how the report view will be sorted By default All Data Shown displays greyed out and this field becomes activated when a double break report type is selected at the Break type field At the Amount shown field make a selection from the pull down menu for an available sort option All Da
11. Modify Report Export Report Save Report and Set Result Limit The following information displays beneath the row of buttons Report type Display criteria Date Search criteria Sort by criteria Beneath this row of data the navigation path for the first record in the current report view displays to the far left The Record navigation field at far right lets you navigate to a specific record and includes the total number of records Body section includes rows of records returned by the reporting query Each row is preceded by a checkbox For each record columns of filter buttons display These buttons are followed by columns of statistics for tracking user activity on the Internet by Category Count IP Count User Count Site Count Page Count Object Count or Time HH MM SS A down arrow displays to the right of the Page Count and Object Count for each record By clicking the arrow a detail report view for that record displays Footer section includes the username of the login ID used for this session Logged in as Dep TECHNOLOGIES ENTERPRISE REPORTER EVALUATION GUIDE CONFIGURE TEST THE ENTERPRISE REPORTER USE ENTERPRISE REPORTER DRILL DOWN REPORTS 3 Use the tools in the right panel to create the desired drill down view NOTE See Summary Drill Down Report navigation for information on using the reporting elements described in this sub section 4 The drill down view can be exported saved and or scheduled to run a
12. Save Custom Report Save Name Description Date Scope From Date From Time A 3 A To Date 7 S To Time A a a Break type Ju Soest d Output type E Mail As Attachment E Hide Un Identified IPs Format fr o Detailed Info I Category information IV Fitter Action information I IP information Content Type information M User information Content information Site information Search String information Result Set Limit Show all records show first 1000 records C Show all blocked records only For single break reports only Amount shown Al Data Shower r Records INIA For E Mail output only Subject Body Save and Schedule Save and Run Save Only Ele Internet Save Custom Report option Detail report 2 In the Save Name field enter a name for the report This name will display in the Report Name pull down menu in the Saved Custom Reports option acces sible via the Custom Reports menu 3 Inthe Description field enter the report description This description will display in the Report Description field in the Saved Custom Reports option accessible via the Custom Reports menu 4 The date scope for the current report view displays in the From Date and To Date fields If you wish to change the date scope make a selection from the following choices in the Date Scope pull down menu Today Month to Date Monthly Year to Date Daily Yesterday
13. Stet Tine mum 020000 mM em Log Down Reports WE 10012008 rm he miog 022207 ae EE 03002006 omom oano2008 10220 AM 0802005 107200 AM 10720 AM 08012005 10 2200 AM 1001 2008 100 0PM 1001 2006 0400200 Pea CAT ty Add Evert NOTE M you would lke your scheduled event to run today be sure to specify a future Start Term in the Add Evert to Scheide meres Retesh Bees LIS fy Ale 10 Event Schedule window administrator login If logged in as the administrator all scheduled events display If logged in as a manager only the events scheduled by that manager login ID display If the Web Client Scheduler is turned off the message To view event schedules please enable Web Client scheduler using ER Admin GUI displays in place of scheduled events 2 In the Event Schedule window click the Add Event button to open the Add Event to Schedule dialog box E http 200 10 101 89 8080 Add Event to Scheduler oj x Name IT Report to Run DO Today Categories zl When to Run Diy d Day of the Week NA J Start Time 8 zllon z AM z Server Time 05 16 2007 03 08 56 PM PDT Internet Add an Event 3 Enter a Name for the event 8E6 TECHNOLOGIES ENTERPRISE REPORTER EVALUATION GUIDE 27 CONFIGURE TEST THE ENTERPRISE REPORTER CREATE A CUSTOM REPORT FOR A SPECIFIC USER 28 4 Select the Report to Run from the pull down menu 5 Select the frequency When to Run from the pull down menu D
14. a category group from the Group Name pull down menu Any categories previously entered display in the list box in this frame For evaluation purposes select Pornography Adult Content as the only category in this category group 2 Click the Add To Group button to open the Add To Group pop up box A http 200 10 100 88 Group iinternal_traffic Categories Adware Alcohol Animals Pets Art Automobile Banner Web Ads Books amp Literature Writing Chat Child Pornagraphy Comics Community_Organizations Criminal_Skills Cults Dating Personals Drugs Unsavory Dubious Education Add To Group e Internet Add To Group 3 Select a category from the pop up box by clicking on your choice to highlight it TIP To select multiple categories press the Ctrl key on your keyboard and then click on categories to highlight them 4 Click the Add To Group button in the pop up box to specify the selected cate gories to be added to the Group Definitions frame list box 5 Click the X in the upper right corner of the Add To Group pop up box to close it and to add all selected categories to the list box in the Group Definitions frame Dep TECHNOLOGIES ENTERPRISE REPORTER EVALUATION GUIDE 5 CONFIGURE TEST THE ENTERPRISE REPORTER USE CUSTOM USER GROUPS TO NARROW YOUR SEARCH Use custom User Groups to narrow your search The next step is to create user groups which are customized groupings of users
15. a dedicated MySQL server data base that works in conjunction with 8e6 s R3000 Internet filtering appliance the Enterprise Reporter handles substantial amounts of Internet traffic because of its unique processing approach which pre processes and indexes data in a format conducive to high speed retrieval Note to Evaluators Thank you for taking the time to review 8e6 s Enterprise Reporter Appliance Your interest in our company and product is greatly appreciated This Evaluation Guide Is designed to provide product evaluators an efficient way to install configure and exercise the main product features of the Enterprise Reporter Dep TECHNOLOGIES ENTERPRISE REPORTER EVALUATION GUIDE 1 INSTALL THE ENTERPRISE REPORTER NOTE TO EVALUATORS INSTALL THE ENTERPRISE REPORTER To install the appliance configure the box and to test reporting is operational please refer to the step by step instructions found in the Enterprise Reporter Quick Start Guide provided in the box Please note that prior to reviewing the Enterprise Reporter you should install the R3000 Internet Filter which is required for sending logs to the Reporter See the R3000 Internet Filter Evaluation Guide for instructions on how to setup the filter Disable Pop up Blocking Software Please note that a user with pop up blocking soft ware installed on his her workstation will need to disable pop up blocking in order to use the Client Evaluation Best Practice Once th
16. a separate browser window containing the canned report in the PDF format 8E6 TECHNOLOGIES ENTERPRISE REPORTER EVALUATION GUIDE 11 CONFIGURE TEST THE ENTERPRISE REPORTER USE ENTERPRISE REPORTER CANNED REPORTS a ssss isse terprise Reporter 06 Technologies From 5 8 2007 Report Type Blocked Request Count To 5 8 2007 Details Top 20 Users by Blocked Request Chart based on Blocked Request Count Top 20 Users by Blocked Request Tests Administrater accounting LOGOLAC counting Adeninistrater ADMINISTRATOR DEFAULT LOCO Daavid Accounting LOGO Administrator Four LOGO Programmers bonille LOGO DEFAULT b4avid LOGO Marketing Administrator Programmers LOGO benille Marketing LOGO Administrater LOGO Marketing dinahe Frogrammers LOGO ton dinahe LOGO Programmers ang books Sales DAVID SSH naugle Sales 600 700 300 200 Blocked Request Count Report Generated by manager Date 5 9 2007 Time 10 20 15 AM Page tot Sample Bar Chart Canned Report 8e6 Enterprise Reporter mu From 51872007 Report Type Categories To 18 2007 Details Categories Comparison Page Count Comparison Categories Bi Yahoo IM 25 89 I Search Engines 11 24 Banner Web Ads 8 08 7 Web_Based_Email 7 17 E KQ and AIM 7 02 Bl General Business 6 Run Menager 5 69 aj information Technology 5 45 J Uncategorized 4 03 Bj Pornography Adult Content 2 86 Bj News 2 63 Ej Shopping 2 18 ad MIKETST 2 02 By image Servers
17. been set up via the Settings menu Once you have generated a drill down report view you can customize your view save the view export the view and or schedule the report to run at a designated time 8E6 TECHNOLOGIES ENTERPRISE REPORTER EVALUATION GUIDE 13 CONFIGURE TEST THE ENTERPRISE REPORTER USE ENTERPRISE REPORTER DRILL DOWN REPORTS How to generate a Summary Drill Down Report To generate a summary drill down report 1 Go to the navigation panel and click Drill Down Reports to display by default today s Categories report view by Page Count in the right panel gt Dinplay Top 50 by Page Court R E ver 2 crime ed A Court DIR i Sm IT a DI Zz or owa H S 1A on 2120 AIM MSW Manager D E va E oe w fF Ba F E ze RH ra Sr F rn Ei E e F isp LAG F Ee F Sample Drill Down Categories Report Summary report 2 Click one of the following menu topics in the navigation panel for the type of report you wish to view Categories IPs Users Sites Category Groups All User Groups For purposes of this evaluation select Categories NOTE As the report is generating the message Please wait for your report to be gener ated displays If no records are available an alert box opens displaying the message No records returned The report view is horizontally organized into three sections e Header section includes buttons for customizing the current view New Report
18. category row This will bring up a view of the top users for this category by page count Dep TECHNOLOGIES ENTERPRISE REPORTER EVALUATION GUIDE 15 CONFIGURE TEST THE ENTERPRISE REPORTER USE ENTERPRISE REPORTER DRILL DOWN REPORTS Count columns Columns for specified item counts display in the body of all drill down report views The column for the current report type does not display and therefore cannot be selected IP User Site Page Object Time Count Count Count Count Count HH MM SS 63 37 132 35 963 434 95 40 20 95 60 60 6 885 8 088 u 10 59 0 97 57 116 4 542 7 6 919 8 19 10 z 94 56 87 4 453 8 883 8 8 0 z 30 20 12 3 2237 207 7 7 33 30 Count columns Category Count displays the number of categories a user has visited or the number of categories included within a given site Categories are set up for the Web access logging device filter via the Settings menu option It is possible for a site to be listed in more than one category so even if a user has visited only one site this column may count the user s visit in two or three categories IP Count displays the number of sites or categories visited by the IP address on the user s machine User Count displays the number of individuals who have visited a specific site or category Site Count displays the number of sites a user has visited or the number of sites in a category This figure is based on the root name of the site
19. do not click any of the buttons in the frames described below Instead click the Close button in the pop up box and return to step 1 3 Make entries in one of the three frames e Username Pattern This frame is used for including users from a specific group such as sales on the network In the Pattern field enter the appro priate characters and wild card to add specified users to the group For example type in sales to add anyone to the group who has a sales desig nation on your network Click the Add Pattern button to add the pattern Dep TECHNOLOGIES ENTERPRISE REPORTER EVALUATION GUIDE 7 CONFIGURE TEST THE ENTERPRISE REPORTER USE CUSTOM USER GROUPS TO NARROW YOUR SEARCH e Please Enter IP Range This frame is used for including users based on a range of IP addresses For example you might have one range of IP addresses for sales and another for admin Enter the IP address range in the From and To fields Click the Add IP Range button to add the IP address range e Individual Adds Removes This frame is used for including and or excluding specified users Click the Show All button to display a list of all users in the list box To narrow down the list of users make an entry in the Please enter a filter field using the wild card and click the Apply Filter button to only display the users you specified To select from users in the list box click on the user s to highlight your choice s After
20. down menu At the activated Generate using field make a selection from the pull down menu for the sort option to be used IP Count User Count Site Count Page Count Object Count Time Hit Count 8E6 TECHNOLOGIES ENTERPRISE REPORTER EVALUATION GUIDE CONFIGURE TEST THE ENTERPRISE REPORTER APPENDIX B EXPORT AND SAVE SUMMARY REPORTS Methods for exporting a Drill Down Report A drill down report view can be emailed or viewed in a specified output format via the Export Drill Down Report option Email option The email option for exporting reports lets you electronically send the report in the specified file format to designated personnel NOTES If you are using Lotus Notes as your primary e mail client instead of Microsoft Outlook or Outlook Express refer to Appendix B ofthe Enterprise Reporter Web Client User Guide for information on how to configure Lotus Notes to work with the ER Client For reports generated in the HTML format the contents of the file will be embedded in the email message For reports generated in any other format MS DOS Text PDF Rich Text Format Comma Delimited Text Excel English the file will be sent as an email attach ment A WARNING If using a spam filter on your mail server email messages or attachments sent by the Client might not be delivered if these messages contain keywords that are set up to be blocked Consult with the administrator of the
21. making all choices click Add to Individuals to include the selected users to the group or click Add to Exceptions to exclude the users from the group TIP In the Individual Adds Removes frame if you know which users you would like to add exclude to from the group you can bypass the step for showing all users and making your selections To use this shortcut enter the criteria in the Please enter a filter field along with the wild card and then click the Apply Filter button to display your results in the list box 4 After you have made your entries click Close to close the pop up box The following information displays in the Group Definitions frame list box when a selection for the group is made from the Group Name pull down menu e If an entry was made in the Username Pattern frame PATTERN and the character s you entered display s e If entries were made in the IP Range frame IP RANGE X X X X AND SS SST displays in which X X X X represents the IP address that was entered in the From or To field e If entries were made in the Individual Adds Removes frame INDIVIDUAL and or EXCEPTION displays in which represents specific details about the entry NOTE A combination of any of items above may display in the Group Definitions frame list box based on entries you made in any of the frames in the pop up box Rebuild Groups After making all additions modifications o
22. or icq com For evalu ation purposes leave this section blank to gather the most information about the user s activity 4 After defining items in steps 2 and 3 click the View Drill Down Results button to begin generating the report es tee Fae sl Deran ey PAGE PEPORT OTHER OPTIONS G Canned Reporte gt Categories Exped Resort Date 5 2007 to Sa200 Sort ke Date Ascending Save Hepat ben baten Recor SL en 24 2 Jor coe Content Content 200 100 109 171 LAPTORT 200 100 103 171 LAPTOPS 300 400 103 174 LAS SOOO IY LAP TORT 200 109 103 17 200 100 103 171 Nap iF g Custom Report Wizard Specific User Detail by Page report 8E6 TECHNOLOGIES ENTERPRISE REPORTER EVALUATION GUIDE 23 CONFIGURE TEST THE ENTERPRISE REPORTER CREATE A CUSTOM REPORT FOR A SPECIFIC USER NOTE As the report is generating a window displays on the screen providing status on which stage of the report process is underway When completely generated the specific user report displays in the view pane This report has the same format as the detail drill down report discussed earlier The custom report view can be exported saved and or scheduled to run at a specified time NOTE See Export a Custom Report for information on exporting a report view See Schedule a report to run for information on how to schedule a report to run at a specified time Next steps for documenting monitoring specific user activ
23. with the elements that should be configured first then moving on to the usage of the many different types of reports available in the Reporter You are directed through the normal path of initial setup and then led through a standard use case that explains how to investigate a violation of your Internet Acceptable Use Policy After stepping through this evaluation guide you will understand how to set up powerful reports that can be e mailed on a regular basis thus minimizing the effort required for ongoing configuration of the product In short this evaluation guide demonstrates that the Enterprise Reporter is both easy to use while at the same time best in class in the level of detailed reporting it provides Dep TECHNOLOGIES ENTERPRISE REPORTER EVALUATION GUIDE 3 CONFIGURE TEST THE ENTERPRISE REPORTER USE CUSTOM CATEGORY GROUPS TO NARROW YOUR SEARCH Use custom Category Groups to narrow your search Prior to running any reports there are a few recommended configuration steps that create a more customized experience for the evaluator The first step is to create category groups which are customized groupings from the 8e6 library of more than 99 filter categories For example most customers prefer to set up a category group for those categories that are not allowed under their organization s Accept able Use Policy Creating such a category group reduces the time it takes to iden tify violations of this policy How to create cust
24. you wish to use in your query Today Month to Date Monthly Year to Date Daily Yesterday Month to Yesterday Year to Yesterday Last 8E6 TECHNOLOGIES ENTERPRISE REPORTER EVALUATION GUIDE 37 CONFIGURE TEST THE ENTERPRISE REPORTER APPENDIX B EXPORT AND SAVE SUMMARY REPORTS 38 Week Last Weekend Current Week Last Month Reports can be run for any data saved in the ER Server s memory e Today this option generates the report view for today only if logs from the Web access logging device have been received and processed e Month to Date this option generates the report view for the range of days that includes the first day of the current month through today e Monthly selecting this option activates the From Date and To Date pull down menus where you specify the range of months 1 12 and or years 1998 2009 e Year to Date this option generates the report view for the range of days that includes the first day of the current year through today e Daily selecting this option activates the From Date and To Date pull down menus where you specify the range of months 1 12 days 1 31 and or years 1998 2009 The generated report view includes data for the specified days only if the data for these days are stored on the Server e Yesterday this option generates the report view for yesterday only e Month to Yesterday this option generates the report v
25. 7 Date Scope and Date fields nennnnoasensnnenretns tessere ttrntrnntnesteertttnnnnnnnnnnneettentnnn nnna 37 Display and Hecorde feld 38 Search and Filter String Helde seser rnana AAE E AREARE 39 Sort by and Order fields aoni araara E ITE AREE ESEA 39 Break ype Nel eene lan Rt reden 39 Fotmattield ege ee ee ee ege 39 For double break reports Only nn 40 Amount shown field nenn 40 ee E UE EE 40 For pie and bar charts only serierna ETE E 40 Genefateusmg Held ET 40 Methods for exporting a Drill Down Report c ccccccceceeeeeeeeeeeeneecaeeeeeeeeeeeeesensennaeeaeeeeeeeeess 41 EE UE e rel ar er Henn A ta emt ae Late Shaina Al 41 View and print options nee 42 AUT Lee Tt e Le TEE 43 Sample report file formats 44 u0snnennnnnnnnennnnnnnnnnnnennnnnnnnnnnnnnennennnnannnnnnnrnnrrn nenn 43 PDR Ahea EIER EIER DENE E 44 iv 8E6 TECHNOLOGIES ENTERPRISE REPORTER EVALUATION GUIDE 8E6 ENTERPRISE REPORTER EVALUATION GUIDE OVERVIEW 8E6 ENTERPRISE REPORTER EVALUATION GUIDE Overview Thank you for choosing to review 8e6 Technologies Enterprise Reporter The Enterprise Reporter helps administrators manage internal Web based threats by documenting historical Internet usage information by user The Enterprise Reporter is unique in that it is the only dedicated appliance that processes and displays Internet filtering logs without compromising filtering perfor mance or impacting network functions Built on
26. 8e6 has created 10 different sample report formats to help first time users under stand the various types of reports available in the Enterprise Reporter For purposes of this Evaluation Guide only three of the 10 are described in detail below A complete description of all other sample reports is available in the Enter prise Reporter Web Client User Guide How to generate a Sample Custom Report 1 Choose Sample Custom Reports from the Custom Reports menu and then click one of the following available selections to open a separate browser window containing the generated canned report in the PDF format Top 20 Categories by Page Count Top 20 IPs by Category IP Top 20 Users by Category User Top 20 Users by Page Count e Top 20 Categories by User Category e Top 20 Sites by User Site By User Category Site Top 20 Sites by Category Site By Category Site IP By Category User Site 2 From the open PDF file the canned report can be exported in some of the following ways e print the report click the print icon to open the Print dialog box and proceed with standard print procedures e save the report click the save icon to open the Save a Copy dialog box and proceed with standard save procedures 3 Click the X in the upper right corner of the report window to close it Dep TECHNOLOGIES ENTERPRISE REPORTER EVALUATION GUIDE 29 CONFIGURE TEST THE ENTERPRISE REPORTER APPENDIX A SAMPLES OF COMMONLY U
27. OLOGIES ENTERPRISE REPORTER EVALUATION GUIDE CONFIGURE TEST THE ENTERPRISE REPORTER USE ENTERPRISE REPORTER DRILL DOWN REPORTS e inthe Record navigation field click any of the four arrow buttons to advance forward or backward through the list of records In the order in which they display in the Record field clicking these buttons moves you to the first record the record prior to the selected record the record following the selected record and the last record Detail Drill Down Report navigation By using the Summary Drill Down Report the administrator should have narrowed the investigation to a specific category e g Pornography Adult Content and a specific user name The next step is to drill down into the detailed URL information to confirm the exact pages visited by the suspected policy violator To access the detail drill down report click the arrow to the right of any record in the Page Count column of the Summary Drill Down Report IP User Site Count Count Count 63 37 132 95 60 60 97 57 116 a4 56 87 30 20 12 3 2237 207 I 7 33 30 Down arrow to the right of a record in a column Report type columns Below is a description of each column available in the detail drill down report view The administrator can select which columns to display by selecting the check boxes or the Check All Uncheck All button gt DETAIL BY PAGE REPORT Categories tegory IV Fite
28. SED REPORTS Report format For each report the header of the reports contain the following information e Sort Order Page Count descending e From To today s date displays e the name of the report displays The footer of the reports contain the following information e today s date MM DD YYYY and time HH MM SS AM PM the report was generated Page number e Filter None e Generated by manager s login ID Examples of available Sample Custom Reports Sample Report 1 Top 20 Users by Category User This report shows the top 20 users for each of the categories in the 8e6 library This is a useful tool to quickly scan for excessive use of any category Sort Order Page Count descending Category Users Top 20 Users by Page Count From 9 18 2006 To 9 18 2006 Category Instant_Messaging Users Yasser LOGO Programmers james MUD JEFF LOGO Programmersiflee LOGO Tech jbisono LOGO Programmers mogaly RD RPATE LOGO Programmers zhou LOGO Programmers feng logo Administration gsmit LOGO QC Deptirsingdai LOGO Programmerswcho RD RSUTTO LOGONAC Deptidet gesiue Ae bw A r Total for Instant_Messaging User Count 14 sorted by Page Count descending Category Search_Engines Users Page Count RD RPATEL 1 315 LOGO Programmerslafan 760 LOGO Tech jbison 653 Yasser 592 LOGO Programmerswcho 409 LOGO Programmers mogaly 398 LOGO Programmers zhou 356 LOGO Programmers feng 262
29. SED REPORTS Sample Report 3 By Category User Site This is an example of a triple break report that shows all activity on the network broken out by category then user and then site This is a useful report if the administrator is looking for an all encompassing view of Internet activity within the organization However please note that this is usually a very lengthy report since it captures all user information by site Sort Order Page Count descending Category User Sites From 9 18 2006 To 9 18 2006 Category Instant_Messaging User LOGO Programmers feng Sites Object Count 207 46 106 17 H 65 54 239 20 H msn com 2 imgag com 21 Total for LOGO Programmer but 23 Site Count 4 sorted by Page Count descending Category Instant_Messaging User LOGO Programmers zhou Sites Object 65 54 171 21 207 46 106 82 65 54 239 20 207 46 27 80 64 4 36 29 65 54 171 48 msn com imgag com Total for LOGO Programmers zhou Site Count 8 sorted by Page Count descending Category Instant_Messaging User LOGO Programmers james 9 18 2006 4 38 41 PM 866 Technologies Enterprise Reporter Web Page 1 of 176 Filter None Generated by deta Sample Category User Sites report 32 8E6 TECHNOLOGIES ENTERPRISE REPORTER EVALUATION GUIDE CONFIGURE TEST THE ENTERPRISE REPORTER APPENDIX B EXPORT AND SAVE SUMMARY REPORTS Appendix B Export and Save Summary Reports The Enterprise Reporter has a variety o
30. UIDE nanusnunnannnnnnnnnnnnnnnnnnnnnnnnnnnnnn 1 Overview SE ee EE eer 1 Note to Evaluators 2 nn a elek een suausetudvetendsedtinedsssctuvinne 1 INSTALL THE ENTERPRISE REPORTER uesnussnnnnnunnnnnnnnnnnnnnnnnnnnnnnnnnnnnannnnnnnnnnnnnnn 2 CONFIGURE TEST THE ENTERPRISE REPORTER ccccssssssseeeeceeccesseeeeeeeeeeasseees 3 Understand the most common and useful features uuussssnnnnensnnnnnnnnnnnnnnnnnnnnnnnnnnnnnn 3 Use custom Category Groups to narrow your Search 4 How to create custom Category Groups uuenesssnnnnnnssnnnnnnnnnnnnnnneeennnnnnnennnnnnnnnennnnnnnn nn 4 Group Information frame EE 4 How to add a Category Group 4 Group Definitions frames nne nalen aoe ain ee eet 5 How to add Categories to a Category Group 5 Use custom User Groups to narrow your Search ussnnnsssnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnn 6 How to create User Groups 1 2 Ree ARENS 6 Group Information frame 6 Adda Uleies ere ed eee ed cet esate edn ea eta ae leet hd a a 6 Group Definitions frame nenn 7 D fine a User CrO Up ie fei enges SEA Mesa iaai 7 Eeler 8 Use Enterprise Reporter to conduct an investigation uurrerseeennnnnnnnnnnnnnnnn nn 9 Use Enterprise Reporter Canned Reports Au 10 How to generate a Canned Report nn 11 How to export a Canned Report c ccccccecceeeeeeeeeeeceneaaeceeeeeeeeeeeeeesececeacaeeeeeeeeeteeeeeeeneees 13 Use Enterprise Reporter Drill Down Reports
31. ach record Reports gener ated in all other formats PDF Rich Text Format HTML will display any lengthy string of text wrapped around within a fixed column width for each record 42 8 amp 6 TECHNOLOGIES ENTERPRISE REPORTER EVALUATION GUIDE CONFIGURE TEST THE ENTERPRISE REPORTER APPENDIX B EXPORT AND SAVE SUMMARY REPORTS View and print tools In the browser window containing the report the tools available via the toolbar let you perform some of the following actions on the open report file File e Save Ctrl S or Save As save the report file to your local drive e Print Ctrl P open the Print dialog box where specifications can be made before printing the report file such as changing the orientation of the printed page by selecting Portrait vertical or Landscape horizontal Edit e Select All highlight the entire text Ctrl A and then Copy Ctrl C and Paste Ctrl V this text in an open file e Perform a search for text gt Find search for specific text in the file Ctrl F To close the report file window click the X in the upper right corner of the window Sample report file formats The following report file formats are available for emailing and viewing MS DOS Text PDF Rich Text Format HTML Comma Delimited Text Excel English L NOTES 8e6 recommends using the PDF and HTML file formats over other file format selections in particular for detail repor
32. aily Weekly or Monthly If Weekly specify the Day of the Week from the pull down menu Sunday Saturday 6 Select the Start Time for the report 1 12 for the hour 00 59 for the minute and AM or PM NOTE The default Start Time is 8 00 AM If you wish to run a report today and this time has already passed be sure to select a future time Q TIP Click Cancel to return to the Event Schedules window without saving your edits 7 Click Save to add the scheduled event The custom report will now be sent automatically at the pre defined time on an ongoing basis until the administrator deletes the scheduled event By saving and scheduling this custom specific user report the administrator will be able to conveniently monitor policy violators in the future and use these reports in any disciplinary action that may result 8E6 TECHNOLOGIES ENTERPRISE REPORTER EVALUATION GUIDE CONFIGURE TEST THE ENTERPRISE REPORTER APPENDIX A SAMPLES OF COMMONLY USED REPORTS Appendix A Samples of Commonly Used Reports Though this Evaluation Guide is primarily designed to lead the evaluator through the process of an investigation there are many other useful features to explore in the Enterprise Reporter Below is a summary of some of the other custom reports an administrator can create and have automatically emailed on a regular basis in order to be kept up to date on Internet threats arising from within the organization
33. all checkboxes e Category information this column will include the category name e g Alcohol for each record e IP information this column will include the IP address of the machine e g 200 10 101 80 for each record e User information this column will include the path of the username e g LOGO Admin JSmith for each record Site information this column will include the URL of the Web site visited by the user e g coors com for each record Filter Action information this column will include the type of filter action used by the R3000 in creating the record Allowed Blocked Warn Blocked for the first warning page that displayed for the end user Warn Allowed for any subsequent warning page that displayed for the end user X Strike or N A if the filter action was unclassified at the time the log file was created e Content Type information this column will include the method used by the R3000 in creating the record Search KW Search Engine Keyword URL KW URL Keyword URL Wildcard Https High HTTPS Filtering Level set at High X strike X Strikes Blocking Pattern Proxy Pattern Blocking or N A if the content was unclassified at the time the log file was created e Content information this column will include criteria used for determining the categorization of the record or N A if unclassified e Search St
34. ata Shown was selected at the Display field If any other selection was made at the previous field the default number saved in the Options window displays in this field Enter the maximum number of top records to be included in the query 8 amp 6 TECHNOLOGIES ENTERPRISE REPORTER EVALUATION GUIDE CONFIGURE TEST THE ENTERPRISE REPORTER APPENDIX B EXPORT AND SAVE SUMMARY REPORTS NOTE The Default Top Value entry in the Default Options window is accessible via Default Options in the Settings menu See the Default Options sub section in Chapter 2 Customizing the Client of the Enterprise Reporter Web Client User Guide for more information about the Default Top Value Search and Filter String fields The Search and Filter String fields are used for specifying search criteria in the current summary report view Atthe Search field make a selection from the pull down menu for the search term to be used None Contains Starts with Ends with In the Filter String field N A displays greyed out if None was selected at the Search field If any other selection was made at the previous field enter text in this field corresponding to the type of search term selected Sort by and Order fields The Sort by and Order fields are used for specifying the manner in which the generated report view will be sorted At the Sort by field make a selection from the pull down menu for one of the avail able sort opti
35. aved in the Options window 7 If pertinent make a selection for additional reporting options e For double break reports only specify the top count option to be used For pie and bar charts only specify the count column sort option to be used NOTE Information on using the fields not detailed in this pop up box can be found in the Report fields sub section 8 In the For E Mail output only field fill in the fields for emailing the report To Cc Bcc Subject and Body 9 Click Save Only to save your selections and entries for the custom report and to close this pop up box Most of the captured information is available for modi fication in the Saved Custom Reports option accessible via the Custom Reports menu NOTE See Schedule a report to run for information on how to schedule a report to run at a specified time 8E6 TECHNOLOGIES ENTERPRISE REPORTER EVALUATION GUIDE CONFIGURE TEST THE ENTERPRISE REPORTER APPENDIX B EXPORT AND SAVE SUMMARY REPORTS Other Summary Report tools Set Result Limit 1 Click the Set Result Limit button to open the Set Result Limit pop up box A Set Result Limit Microsoft Internet Explorer ll xj Set Result Limit Result Set Limit Show all records Show first 1000 records Set Result Limit option Summary report only 2 Indicate the Result Set Limit by selecting the appropriate radio button e Show a
36. bout specified end user activity 8 amp 6 TECHNOLOGIES ENTERPRISE REPORTER EVALUATION GUIDE CONFIGURE TEST THE ENTERPRISE REPORTER USE ENTERPRISE REPORTER CANNED REPORTS How to generate a Canned Report To generate a canned report 1 Go to the navigation panel and click Canned Reports to display yesterday s Top 20 Internet Filtering Categories by Page Count report view in the right panel Yesterday s Top 20 Categories by Page Count Report TIP Click the left arrow or right arrow at the edges of the dashboard to display thumbnail images that are currently hidden NOTE If the ER Server does not contain any data as on a newly installed unit the default report page will not show any thumbnail images or bar chart report in the right panel and the following text displays This report cannot be displayed because there is no data to show for this report 2 Click a menu topic in the navigation panel for the time period to be included in the report Yesterday Last Week Last Month Week to Yesterday or Month to Yesterday 3 Click a thumbnail in the dashboard for the selected report option to display as the report view NOTE If necessary click another time period or thumbnail to display that specified report view in the right panel 4 To see details for the generated canned report view click the Printable Version link to the left just below the dashboard This action opens
37. e appliance is installed allow the Enterprise Reporter to run for several days prior to evaluating reports in order to optimize the evaluation expe rience This will allow the Enterprise Reporter to accumulate multiple days of data and present more meaningful reports Having performed these preliminary steps the Reporter will function properly on day one of the install with some reports showing no data e g canned reports 2 8E6 TECHNOLOGIES ENTERPRISE REPORTER EVALUATION GUIDE CONFIGURE TEST THE ENTERPRISE REPORTER UNDERSTAND THE MOST COMMON AND USEFUL FEATURES CONFIGURE TEST THE ENTERPRISE REPORTER Understand the most common and useful features One of the advantages of a hardware appliance in addition to its compatibility and extremely low profile on the network is its ease of use Configuration of the Enter prise Reporter can seem disarmingly simple at times but when the hardware and software are designed to work together the levels of complication decrease and robust power and efficiency significantly increase The Enterprise Reporter version 5 0 series has an enhanced Web based user interface that is designed to be very intuitive utilizing an easy to navigate menu tree that is organized to follow the natural flow of an investigation of anomalous Internet activity This section of the evaluation guide leads the evaluator in a linear fashion through the most common and useful features of the Enterprise Reporter starting
38. e filter action was unclassified at the time the log file was created e Content Type the Content Type column shows the method used by the R3000 in creating the record Search KW Search Engine Keyword URL KW URL Keyword URL Wildcard Https High HTTPS Filtering Level set at High X strike X Strikes Blocking Pattern Proxy Pattern Blocking File Type Https Medium HTTPS Filtering Level set at Medium or N A if the content was unclassified at the time the log file was created Content the Content column includes content type criteria used for deter mining the categorization of the record or N A if unclassified e Search String the Search String column includes the full length search string information the end user input into a Search Engine site text box This is very useful in proving the intent of the user since the user manually types this into a search engine site not a pop up or auto redirect To remove columns from the current report view e single column click the checkbox for the specified column e all columns click the UnCheck All button Page links If more than one page of records was returned by the query one or more Page Click the page number to navigate to that page of records 8E6 TECHNOLOGIES ENTERPRISE REPORTER EVALUATION GUIDE 19 CONFIGURE TEST THE ENTERPRISE REPORTER USE ENTERPRISE REPORTER DRILL DOWN REPORTS 20 Eva
39. eee 06 eG 8e6 e Enterprise Reporter 8e6 Technologies EVALUATION GUIDE Models ER HL SL Software Version 5 0 00 Document Version 01 07 09 ENTERPRISE REPORTER EVALUATION GUIDE 2009 8e6 Technologies All rights reserved Printed in the United States of America Local 714 282 6111 e Domestic U S 1 888 786 7999 International 1 714 282 6111 This document may not in whole or in part be copied photocopied reproduced trans lated or reduced to any electronic medium or machine readable form without prior writ ten consent from 8e6 Technologies Every effort has been made to ensure the accuracy of this document However 8e6 Technologies makes no warranties with respect to this documentation and disclaims any implied warranties of merchantability and fitness for a particular purpose 8e6 Technologies shall not be liable for any error or for incidental or consequential dam ages in connection with the furnishing performance or use of this manual or the examples herein Due to future enhancements and modifications of this product the information described in this documentation is subject to change without notice Trademarks Other product names mentioned in this manual may be trademarks or registered trade marks of their respective companies and are the sole property of their respective man ufacturers 8 amp 6 TECHNOLOGIES ENTERPRISE REPORTER EVALUATION GUIDE CONTENTS 8E6 ENTERPRISE REPORTER EVALUATION G
40. eld specify the start of the time range by making a selec tion from any of the pull down menus for the hour 1 12 minute 00 59 or AM or PM At the To Time field specify the end of the time range by making a selection from any of the pull down menus for the hour 1 12 minute 00 59 or AM or PM 3 Specify the type of query you wish to perform Category User IP Username Site e Category to perform a query on activity within a specific filter category make a selection from the filter categories in the pull down menu Category items are set up under the Category Descriptions option from the Settings menu For evaluation purposes leave this section blank to gather the most information about the user s activity User IP to perform a query on the activity of a specific machine enter the IP address of the machine e g 200 10 100 174 For evaluation purposes leave this section blank to gather the most information about the user s activity Username to perform a query on the activity of a specific user enter the username e g tjohnson You can use the character before and after a partial name to do a wildcard search e g johnson For evaluation purposes select a user name with frequent Internet activity to ensure the report generates some data Site to perform a query on activity at a specific Web site visited by users enter the domain or site address e g yahoo com
41. eport NOTE Information on using the fields in this pop up box can be found in the Report fields sub section 2 At the Data to export field select the amount of data to be exported from the pull down menu All the Rows on this Page or Only the Selected Rows on this Page The second selection is available only if some of the records in the report view were de selected 3 After making selections and or entries in all fields click the Email or View button to close this pop up box and to export the data in the specified file format NOTE Information on using the buttons this pop up box can be found in the Methods for exporting a Drill Down Report sub section 8 amp 6 TECHNOLOGIES ENTERPRISE REPORTER EVALUATION GUIDE CONFIGURE TEST THE ENTERPRISE REPORTER APPENDIX B EXPORT AND SAVE SUMMARY REPORTS How to save a Summary Drill Down Report 1 Click the Save Report button to open the Save Custom Report pop up box AA http 200 10 101 89 8080 Save Custom Report Microsoft Internet Explorer gt Save Custom Report Save Name Description IT Date Scope Today e From Date v d From Time A A A Break type Categories E Output type E Mail As Attachment bd Hide Un Identified IPs Format PDF e For double break reports only Amount shown Data S d Records wa For pie and bar charts only Generate using di v For E Mail output only To Ce Bee Subject
42. f different reporting options In a fashion similar to the Specific User Report creation process described in the sample inves tigation earlier in this guide administrators can also create custom reports from a Summary Drill Down Report view Summary Custom Reports can be set up to be automatically emailed to the administrator on a regular basis in a variety of formats e g PDF Excel etc Follow the steps below on how to export and save these types of custom reports Record exportation tip Step 1 Select records to be exported In the report view each record is preceded by a checkbox that is populated selected by default When exporting a report only selected records are included To de select a record click the checkbox to remove the check mark from the checkbox To de select all records click the checkbox in the column header Clicking the checkbox in the column header again reselects all records o Category Category Category El rie Fee Gemen Instant_Messaging VW Search_Engines u m VW General Business rn en IV BannerWeb Ads u m VW Chat E gt G eas Step 2 Use header buttons for report customization Clicking one of the buttons at the top of the summary report view opens a pop up box that lets you customize the current report view The following buttons are avail able e New Report this option lets you generate a drill down report view for a date range ot
43. h Engines Shopping Portals Entertainment Internet_Service_Provider Comics Employment Message_Boards Sports Grand Total Count 20 9 18 2006 4 27 01 PM Filter None Generated by data 8e6 Technologies Enterprise Reporter Categories report PDF format Web Page 1 of 1 Examples of other report formats are provided in the Enterprise Reporter Web Client User Guide 8E6 TECHNOLOGIES ENTERPRISE REPORTER EVALUATION GUIDE
44. her than the current default date e Modify Report this option lets you modify the current report view by doing any of the following specify the maximum number of records to be included other than the number entered in Default Options perform a search for specified text or sort the report in ascending or descending order by a specified column e Export Report this option lets you email print or view the current report view in the specified output format e Save Report this option lets you save the current report view so a report using these customizations can be run again later at a designated time e Set Result Limit this option lets you specify the maximum number of records to be included in the report view instead of the default number entered in Default Options 8E6 TECHNOLOGIES ENTERPRISE REPORTER EVALUATION GUIDE 33 34 CONFIGURE TEST THE ENTERPRISE REPORTER APPENDIX B EXPORT AND SAVE SUMMARY REPORTS Step 3 Export a Summary Drill Down Report 1 Click the Export Report button to open the Export Drill Down Report pop up box ki Export Drill Down Report Microsoft Internet Explorer Ale x Export Drill Down Report Break type Categories Format PDF Data to export an the Rows on this Page For double break reports only Amount shown Records f mm For pie and bar charts only Generate using Nie Email View Export Drill Down Report option Summary r
45. iew for the range of days that includes the first day of the current month through yesterday Year to Yesterday this option generates the report view for the range of days that includes the first day of the current year through yesterday Last Week this option generates the report view for all days in the past week beginning with Sunday and ending with Saturday Last Weekend this option generates the report view for the past Saturday and Sunday e Current Week this option generates the report view for today and all previous days in the current week beginning with Sunday and ending with Saturday Last Month this option generates the report view for all days within the past month Display and Records fields The Display and Records fields are used for specifying the number of records from the query you wish to include in the report view and how these records will be sorted These fields are available in the Drill Down Report pop up box via the Modify Report option and in the Advance Options portion of the New Report option and Single User Group window At the Display field make a selection from the pull down menu for the records to be shown on the screen All Data Shown Top Category Count Top IP Count Top User Count Top Site Count Top Page Count Top Object Count Top Time Top Hit Count In the Records field N A displays grayed out if All D
46. istrator would probably run a custom report for the policy violator by specifying the category Pornography Adult Content and all activity within that category within the last month The administrator can then save a PDF version of the report for documentation purposes This custom report provides the necessary forensic information to support any internal repri mand and to protect the organization in the event the incident goes to court To summarize the aforementioned steps were provided to give the user a most likely use case for the 8e6 Enterprise Reporter The next section provides a more in depth view of how to navigate within each of the main sections of the Enterprise Reporter Canned Reports Drill Down Reports and Custom Reports Dep TECHNOLOGIES ENTERPRISE REPORTER EVALUATION GUIDE 9 CONFIGURE TEST THE ENTERPRISE REPORTER USE ENTERPRISE REPORTER CANNED REPORTS Use Enterprise Reporter Canned Reports As previously stated the first thing the administrator will see when logging into the Enterprise Reporter is a dashboard of graphical reports called Canned Reports By viewing these reports an administrator has an at a glance view of any anoma lous behavior that warrants an investigation Canned reports contain pre generated data for a specified period of time Yesterday Last Week Last Month Week to Yesterday or Month to Yesterday for any of the following report topics or entities showing Internet activity Top
47. ity Once the specific user report has been generated the administrator can choose to export and save the report for documenting a case against the policy violator and can also schedule the report to run in the future to monitor this individual on an ongoing basis Export a Custom Report 1 Click the Export Report button to open the Export Custom Report pop up box Pele Export Custom Report Break type Jus Seet d Format POF E Result Set Limit Show all records Show first 1000 records Show all blocked records only Export Custom Report option Detail report NOTE Information on using the fields in this pop up box can be found in the Report fields sub section 2 Modify the Break type and Format and specify the number of records to be included in the report view 3 After making selections and or entries in all fields click the Email or View button to close this pop up box and to export the data in the specified file format NOTE Information on using the buttons this pop up box can be found in the Other Summary Report Tools sub section 24 8 amp 6 TECHNOLOGIES ENTERPRISE REPORTER EVALUATION GUIDE CONFIGURE TEST THE ENTERPRISE REPORTER CREATE A CUSTOM REPORT FOR A SPECIFIC USER Save a Detail Custom Report 1 Click the Save Report button to open the Save Custom Report pop up box A http 200 10 101 89 8080 Save Custom Report Microsoft Internet Explorer
48. ll records Click this radio button to include all records returned by the report query e Show first X records Click this radio button to only include the first set of records returned by the report query 3 Indicate the number of records to be included in a set by making an entry in the blank field represented here by the X 4 Click Apply to apply your settings in the current report view and to close this pop up box Report fields Type field The Type field is used for specifying the report type by which the generated report view will be sorted This field is available in the Drill Down Report pop up box via the New Report option and in the Single User Group window At the Type field make a selection from the pull down menu for one of the avail able report types Categories IPs Users Sites Category Groups User Groups and the current report format displayed Date Scope and Date fields The Date Scope field is used for specifying the period of time to be included in the generated report view Depending on the scope selected the From Date and To Date fields are used in conjunction with this field These fields are available in the Drill Down Report pop up box via the New Report option in the Single User Group window and in the Save Custom Report pop up box via the Save Report option At the Date Scope field make a selection from the pull down menu for the time frame
49. luation steps For the purpose of this evaluation follow these steps to witness how the 8e6 Enter prise Reporter is best in class in terms of the extent of detailed page and object information it provides Step 1 Select a specific user by Category If not already completed select the page information drill down arrow to the right of any record in the Page Count column of the Summary Drill Down Report IP User Site Time Count Count Count HH MM SS 63 37 132 35 93 334 95 40 20 95 60 pp 6 885 5 088 E 10 59 0 o 57 116 DECH RSC 8 19 10 94 E er ae 8 883 EI 8 8 0 30 20 12 3 223 207 i 7 33 30 Page Count column down arrow to the right Step 2 Sort by Filter Action column Clicking the Filter Action column header will sort all records by the type of filter action whether the event was blocked allowed or warned Blocked searches will be highlighted in red font for easier detection OTHER OPTIONS IV Category Filter Action l Export Report 7 IV User IP IV Content Type 3 I User IV Content ___SaveRepot Site I Search String l New Report Modify Report UnCheck All Page Previous 12 Record DI 3211 501 Cor 608 SR EZ Type sovernment 200 10 101 195 RO RH state ny us ue Wildcard https ip state ny us jovernment 200 10 101 146 RO RH state ny us Allowed Wildcard https state ny us Sovernment 200 10 101 145 FOE ste ms Allowed Wildcard https state met sove
50. mail server for work around solutions between the spam filter and mail server 1 In the Export Drill Down Report pop up box click the Email button to open the Email Report pop up box E Email Report Microsoft Internet Explorer 4 oj xj Email Report To Ce Bec Subject Body Cancel Email Report pop up box 2 In the To field enter the email address of each intended report recipient sepa rating each address by a comma and a space 3 An entry in each of the following fields is optional e Subject Type in a brief description about the report e Cc Enter the email address of each intended recipient of a carbon copy of this message separating each address by a comma and a space e Bcc Enter the email address of each intended recipient of a blind carbon copy of this message separating each address by a comma and a space e Body Type in text pertaining to the report Q TIP Click Cancel to close the Email Report pop up box and to return to the report view Dep TECHNOLOGIES ENTERPRISE REPORTER EVALUATION GUIDE 41 CONFIGURE TEST THE ENTERPRISE REPORTER APPENDIX B EXPORT AND SAVE SUMMARY REPORTS 4 Click E mail to send the report to the designated recipient s As a result of this action the Email Report pop up box now displays information to indicate the report is being generated A WARNING Large reports might not be sent due to email size restrictions on yo
51. om Category Groups To create edit or delete a category group click Category Groupings in the Settings menu to display the Category Groupings window in the right panel Catogery Groupings Category Groupings window The Category Groupings window is comprised of two frames used for setting up and maintaining category groupings Group Information and Group Definitions Group Information frame The Group Information frame displays to the left in the Category Groupings window In this frame you can add rename or delete a category group Any category groups that were created display in alphanumerical order in the list box in this frame How to add a Category Group 1 In the field to the left of the Add button type in the name for the category group For this evaluation name the category group Unacceptable Sites 2 Click the Add button to add this entry to the list box above NOTE The category group you added also displays in the Group Name pull down menu in the Group Definitions frame to the right 8E6 TECHNOLOGIES ENTERPRISE REPORTER EVALUATION GUIDE CONFIGURE TEST THE ENTERPRISE REPORTER USE CUSTOM CATEGORY GROUPS TO NARROW YOUR SEARCH Group Definitions frame The Group Definitions frame displays to the right in the Category Groupings window In this frame you define a category group by specifying which categories will belong to that group How to add Categories to a Category Group 1 Select
52. ons Category Count IP Count User Count Site Count Page Count Object Count Time Hit Count At the Order field make a selection from the pull down menu for the order in which to display the sort option count Ascending Descending Break type field The Break type field is used for indicating the manner in which records will display for the specified format when the report view is emailed or viewed This field is available in the Export Drill Down Report pop up box via the Export Report button and in the Save Custom Report pop up box via the Save Report button Choose from the available report selections at the Break type pull down menu Based on the current report view displayed the selections in this menu might include the main report type such as Categories double break report types such as Category IPs or Category Sites and triple break report types such as Cate gory User IPs or Category Site Users For Categories and Category Groups reports the following report types also are available Pie Chart Usernames Pie Chart IPs Bar Chart Usernames and Bar Chart IPs For All User Group reports the following report types also are available User Group Pie Chart User Group Bar Chart Format field The Format field is used for specifying the manner in which text from the report view will be outputted This field is available in the
53. ount as objects The number of objects on a page is generally higher than the number of pages a user visits 8 amp 6 TECHNOLOGIES ENTERPRISE REPORTER EVALUATION GUIDE CONFIGURE TEST THE ENTERPRISE REPORTER USE ENTERPRISE REPORTER DRILL DOWN REPORTS However if an advertisement or banner ad an object on the page is actually a page from another site this item would not be classified as an object but as a page since it comes from a different server By clicking the arrow to the right of any record in this column the custom report view displays data for all objects accessed including hyperlinks to those objects this is covered in greater detail in the next section Detail Drill Down Report navigation NOTE Reporting objects is a configurable option in the ER Administrator interface if the customer does not require this degree of detail and or wants to maximize database storage and reporting performance See the Enterprise Reporter Administrator User Guide for additional details on this option e Time HH MM SS displays the amount of time a user spent at a given site Each page detected by a user s machine adds to the count If a browser window is opened to a certain page and left there for an extended time period and that page is refreshed by either the user or a banner ad the counter starts again and continues as long as Web activity is detected If that Web page contains an active banner ad that refreshes the page every 10 to
54. r Action Date 5 1 2007 to 5 9 2007 er IP IV Content Type Sort by Date Ascending IV Content Display All records SEI Modify Repot Government Page Previous 1 2 Category usere ser gt 5 4 2007 10 38 21 AM Government _ 200 140 101 145 RO RH 5 4 2007 10 38 24 AM Government 200 10 101 146 RO RH 5 4 2007 10 38 29 AM Government 200 10 101 145 RO RH 5 42007 10 38 38 AM Government 200 10 101 146 RO RH 5 4 2007 10 38 43 AM Government 200 140 101 145 RO RH Checkboxes and UnCheck All Check All button e Category the Category column includes the category name e g Alcohol e User IP the User IP column includes the IP address of the user s machine e g 200 10 101 80 User the User column includes any of the following information username user IP address or the path and username e g logo admin jsmith e Site the Site column includes the URL the user attempted to access e g coors com 18 8E6 TECHNOLOGIES ENTERPRISE REPORTER EVALUATION GUIDE CONFIGURE TEST THE ENTERPRISE REPORTER USE ENTERPRISE REPORTER DRILL DOWN REPORTS e Filter Action the Filter Action column displays the type of filter action used by the R3000 in creating the record Allowed Blocked Warn Blocked for the first warning page that displayed for the end user Warn Allowed for any subsequent warning page that displayed for the end user X Strike or N A if th
55. r deletions in the User Groupings window click Rebuild Groups 8 8E6 TECHNOLOGIES ENTERPRISE REPORTER EVALUATION GUIDE CONFIGURE TEST THE ENTERPRISE REPORTER USE ENTERPRISE REPORTER TO CONDUCT AN INVESTIGATION Use Enterprise Reporter to conduct an investigation Once custom category groups and user groups have been created administrators can begin running their first reports In most cases administrators will employ the Enterprise Reporter as a forensic tool to determine if anomalous Internet behavior exists in their organization In order to facilitate this process the Enterprise Reporter menu structure is organized to follow the normal process flow of an inves tigation 1 First the administrator is greeted with a dashboard of high level reports called Canned Reports By viewing these canned reports an administrator can quickly determine if there is any anomalous behavior that needs investigation For example a high level of spyware site activity might be found under a specific username or a high rate of traffic identified in the PornographyAdult Content category If something is detected that warrants further investigation one would then proceed to the Drill Down Report section 2 The next stage of the investigation is to select the Drill Down Report menu The Drill Down Report is a multi dimensional database that allows the user to drill down to the source of any Internet threat For example if there i
56. right Dep TECHNOLOGIES ENTERPRISE REPORTER EVALUATION GUIDE CONFIGURE TEST THE ENTERPRISE REPORTER USE CUSTOM USER GROUPS TO NARROW YOUR SEARCH Group Definitions frame The Group Definitions frame displays to the right in the User Groupings window In this frame you can view members of a user group and can define a user group by specifying which users will belong to that group Define a User Group When defining a user group you can add and or exclude users to from that group Modifications to a user group can be made at any time as necessary 1 Select a user group from the Group Name pull down menu Any users previ ously entered display in the list box in this frame Select Sales for this evalu ation 2 Click the Add To Group button to open the pop up box where you define users to be added excluded to from the group A http 200 10 101 89 8080 Add users to group admin Microsol Username Pattern Define IP Range Pattern From 200 10 100 010 to 200 10 100 100 Use as wild card Add IP Range Individual Adds Removes Use as wild card Please enter a Apply Filter fitter Show All Add to Individuals Add to Exceptions E Done Internet Add Users to group TIPS To view a list of all users go to the Individual Adds Removes frame and click the Show All button to display the list of users in the list box To clear your entries in this pop up box without accepting them
57. ring information this column will include the full search string the end user typed into a search engine text box This column displays pertinent information only if the Search Engine Reporting option is enabled in the Optional Features screen of the Administrator interface 8 In the Result Set Limit field specify the records to be included in the report view For purposes of this evaluation specify Show first 100 records 9 In the For E Mail output only field fill in the fields for emailing the report To Cc Bcc Subject and Body 10 Click Save Only to save your selections and entries for the custom report and to close this pop up box NOTE See Schedule a report to run for information on how to schedule a report to run at a specified time 26 8 amp 6 TECHNOLOGIES ENTERPRISE REPORTER EVALUATION GUIDE CONFIGURE TEST THE ENTERPRISE REPORTER CREATE A CUSTOM REPORT FOR A SPECIFIC USER Schedule a report to run Once a report view has been saved it can be scheduled to run at a designated time To schedule a report to run 1 Go to the Settings menu in the navigation panel and select Event Schedule The Event Schedule option is used for maintaining a schedule for generating a customized report Custom Report Wizard Sample Custom Reports gt ML i i i Wall Clock Time Report 1001 2008 Blocked Request Report mmm Saved Custom Reports t t 7 t Lvent Schedute end ent Run
58. rint the report click the print icon to open the Print dialog box and proceed with standard print procedures e save the report click the save icon to open the Save a Copy dialog box and proceed with standard save procedures C TIP If you saved the report you can later send it as an email attachment Use Enterprise Reporter Drill Down Reports In the event that canned reports in the Enterprise Reporter dashboard reveal abnormal activity the next step in the investigation would be to drill down into the particular category or user information This section provides information about drill down reports that let you query the database to access more detailed information about end user Internet activity The following types of reports can be generated e Categories includes data in each filter category that was set up for monitoring user activity IPs includes Internet activity by user IP address e Users includes Internet activity by username e Sites includes activity on Web sites users accessed e Category Groups includes activity by category groups if category groups previously have been set up via the Settings menu e All User Groups includes activity by all user groups if user groups previously have been set up via the Settings menu Single User Group after selecting the user group from a list of available choices this report shows activity for that user group if the user group previ ously has
59. rnment 200 10 101 145 RO RH state ny us Allowed Wildcard https state mu us sovernment 200 10 101 195 RO RH Istate ny us Allowed Wildcard https state ny ust Sovernment __ 200 10 104 145 RO RH __ state ny us Allowed Wildcard https state ny us sovernment 200 10 101 145 RO RH state ny us Allowed Wildcard https ip state ny us Zovemment 200 10 101 145 RO RH state ny us al Allowed Wildcard https state ny us _ Povernment 1200 10 101 ER RO RH State mus Allowed Wildcard https C te ny ust sovernment 200 10 101 145 RO RH state ny us Allowed Wildcard https state nyus Filter Action column Step 3 Full URL review The full length URL of every Internet search by the users is listed in the URL column of the detail page information To view record data that displays truncated in a column mouse over the column to view the entire string of data in the column for a given record Alcohol Page 1 2 Next Record 144 445 lte 1000 EE 7414 2006 4 17 14 PM http vim budweiser com 7 14 2006 4 18 54 PM Jima beer comi 771472006 4 19 00 PM http jimm budweiser com 7414 2006 4 19 13 PM http Mam beerncom 7414 2006 4 20 56 PM http Annan budweiser com 7417 2006 12 00 58 PM b s Monn coors com ___ 7917 2006 12 04 32 PM http mb ter come 7 17 2006 12 13 25 PM 7447 2006 12 13 25 PM 7 17 2006 12 13 27 PM 741712006 1 35 21 PM 7717 2006 1 35 39 PM P 71712006 1 35 14 PM Mou
60. s unusually high page count in the Pornography Adult Content category the administrator can drill down into the Category User section to determine who is viewing this material Once a specific end user is identified the administrator can then delve into the detail page view section to see the exact pages that end user has been visiting This detailed information provides a wealth of information on the exact time the page was visited the user s IP address whether the site was blocked by the R3000 filter how it was blocked e g in URL library blocked keyword proxy pattern blocking etc and the full length URL By viewing this detail the admin istrator can obtain an accurate gauge of the user s intent whether the user repeatedly attempted to go to a forbidden site or whether it was an isolated inci dent 3 The last stage of an investigation is to document the long term activity of a policy violator since most organizations require more than one or two events to reprimand a user Once the administrator determines the name of the user and the Web sites visited in the Drill Down Report the next step is to run a custom report The administrator can run a specific search of the policy violator for a custom time period by selecting the Custom Report Wizard option in the Custom Reports menu When generating this report a custom time scope specific category and name of a specific end user can be specified As an example the admin
61. se over to view full URL nie JAn winespe ctator com _ hitp ifeoors comi http Ananan coors com Dep TECHNOLOGIES ENTERPRISE REPORTER EVALUATION GUIDE CONFIGURE TEST THE ENTERPRISE REPORTER USE ENTERPRISE REPORTER DRILL DOWN REPORTS Click the URL link to launch the actual Web site viewed by the user to verify the content that was accessed Step 4 Sort by Content Type Sort by the column labeled Content Type by clicking that column header This will sort all records by the search type filtered on the R3000 Internet Filter For example URL indicates a page request was blocked or allowed based on the status of that URL in the 8e6 category library and Search KW indicates a user typed in a prohibited word into a search engine text box One of 8e6 Technologies differentiators is Proxy Pattern Blocking which will show up in the Content Type section if an Internet proxy site was blocked by 8e6 s proprietary proxy signature detection After reviewing a suspected policy violator s Internet activity in the Detail Drill Down Report the administrator will have firm evidence on the user s intent which is critical forensic information to have in the event the investigation moves to the disciplinary phase Step 5 Sort by Search String Sort by the column labeled Search String by clicking that column header This will sort all records alphabetically for res
62. t a spec ified time Summary Drill Down Report navigation Continuing from the last section this section is designed to help the administrator learn how to navigate within the Summary Drill Down Report The Drill Down report is unique in terms of the seemingly endless ways data can be displayed but it is important to understand all of the functions within this tool in order to generate meaningful reports Report columns Filter and count columns display in the body of drill down report views These columns are used for specifying additional information to be included for records or for sorting records by a different column Filter columns and buttons Filter columns display after the column containing the record name and precede the Count columns Category Count IP Count User Count Site Count Page Count Object Count Time HH MM SS Filter columns include an oblong button for each record in the report view j Category Category Category El gt Fr m a PS Instant_Messaging JV Search_Engines J e e V General Business Gr cr Ge IV Bannerfiiveb Ads Cc Le H Chat c E u Filter columns and buttons Clicking a specific filter button for a record gives more in depth analysis on a given record displayed in the current view For the purposes of this evaluation try clicking on the oblong button in the Pornography Adult Content row and Cate gory Users column ifthere is any activity in that
63. ta Shown Top Category Count Top IP Count Top User Count Top Site Count Top Page Count Top Object Count Top Time Top Hit Count Records field The Records field is used for specifying the number of records that will display for the selected sort option By default N A displays greyed out and this field becomes activated when a Top item Count is selected at the Amount shown field In the activated Records field the number saved in the Default Options window displays by default This number can be edited to indicate the number of records to be included in the exported report NOTE The Default Top Value entry in the Default Options window is accessible via Default Options in the Settings menu See the Default Options sub section in Chapter 2 Customizing the Client of the Enterprise Reporter Web Client User Guide for more information about the Default Top Value For pie and bar charts only The Generate using field is available in the Export Drill Down Report pop up box via the Export Report button and in the Save Custom Report pop up box via the Save Report button This field is deactivated by default Generate using field The Generate using field is used for specifying how a Categories pie chart or bar chart will be sorted By default N A displays greyed out and this field becomes activated when a pie or bar chart report type is selected from the Break type pull
64. te a new Custom Report ern nn 22 Next steps for documenting monitoring specific user activity uuennneensnenessennnennennnnnnen 24 Exporta Custom Re pOT a aaa Aires lee a a iaae aaaea 24 Save a Detail Custom Report nn 25 Schedule a seportt run 2 2 2 222 eier 27 Appendix A Samples of Commonly Used Reports een 29 How to generate a Sample Custom Report 4susssnennnnnsnnennnnnnennnnnennennnnnnnennnennne nn 29 Rep rtformatnn nee tee ik lese el E sonbhel da teMiecsdadeat 30 Examples of available Sample Custom Reports rare 30 Sample Report 1 Top 20 Users by Category User AA 30 Sample Report 2 Top 20 Sites by User Site uussnssssseennnnnnennnnnnnennnnnnnnennn nn 31 Sample Report 3 By Category User Site uu oesnnensessnnnnnnnennnnnnennnnnnnnnnnennnnnn nenn 32 Appendix B Export and Save Summary Reports cccceecceeeeeeeeeeeeeeeeeeeeeeeneeneeees 33 Record exportation tip LAE vue esgde dee dake 2er tac EENS SEENEN hieran handen 33 Step 1 Select records to be exported nn 33 Step 2 Use header buttons for report customization nn 33 Step 3 Export a Summary Drill Down Report c ccccccceceeeeeeeeeeeeeeeneeeaeeeeeeeeeeeeeeees 34 How to save a Summary Drill Down Report nn 35 Other Summary Report tools reiia EE E EEE emahegi 37 EE eelsten ee E AA E ee ee eg 37 Rep rtifields eege iesse age een ehe sde et 37 TYPE TE gett See eege ed ere ees el e EE Deeg eet eg 3
65. that reside on the organization s network For example most enterprise customers prefer to set up user groups for each department within the company and educa tion customers prefer to setup separate user groups for each classroom or grade level Creating these user groups reduces the time it takes to identify the source of violations of your organization s Acceptable Use Policy How to create User Groups To create edit or delete a user group click User Groupings in the Settings menu to display the User Groupings window in the right panel Group Definitions Group Nome Be6 Administrators PATTERN Be6 Admninistratcr PATTERN Be6 areserve Delete term s View Group Add To Group User Groupings window The User Groupings window is comprised of two frames used for setting up and maintaining user groupings Group Information and Group Definitions Group Information frame The Group Information frame displays to the left in the User Groupings window In this frame you can add rename or delete a user group Any user groups that were created display in the list box in this frame Add a User Group 1 In the field to the left of the Add button type in the name for the user group Use Sales for this evaluation 2 Click the Add button to add this entry to the list box above NOTE The user group you added also displays in the Group Name pull down menu in the Group Definitions frame to the
66. ts since these files display and print in a format that is easiest to read Lengthy text in PDF HTML and Rich Text Format files wraps around within the column so all text is captured without displaying truncated Comma Delimited Text and Excel report columns may display with truncated text but an entire column can be viewed by mani pulating the column width in the generated report file These reports can then be printed at a smaller percentage than normal size in order to accommodate all text For MS DOS Text reports text may display truncated in parti cular for lengthy usernames and URLs in detail reports but an entire column can be viewed by scrolling to the right Since there is no way to manipulate text in the generated report file the printed report may display with truncated text However the maximum amount of text can be captured by printing the report in the landscape format 8E6 TECHNOLOGIES ENTERPRISE REPORTER EVALUATION GUIDE 43 CONFIGURE TEST THE ENTERPRISE REPORTER APPENDIX B EXPORT AND SAVE SUMMARY REPORTS 44 PDF This is a sample of the Categories report in the PDF format saved with a pdf file extension Sort Order Page Count descending From 9 18 2006 To 9 18 2006 Categories Instant Messaging Search_Engines General Business BannenWeb Ads Chat Financial Institution Movies_ amp Television Web_Based_Email Reference Information_Technology News Image Servers amp Image Searc
67. uide will focus on the most commonly used method the Custom Report Wizard How to use the Custom Report Wizard The Custom Report Wizard option provides an intuitive setup process for gener ating custom reports for one time use or for recurrence at scheduled time periods The Custom Report Wizard option is available from the Custom Reports menu accessed from the navigation panel What kind of custom report do you wont to create Summary Report By Ht Count and Tine Specitic User Detail by Page Speciic User Detad by Object Custom Report Wizard window Generate a new Custom Report To generate a specific user custom report 1 Select radio button next to Specific User Detail by Page and click the Next button 2 Specify the date and time range for the query At the From Date field specify the start of the date range by making a selec tion from any of the pull down menus for month 1 12 day 1 31 or year 1998 2009 For evaluation purposes select the date the Enterprise Reporter was installed to gather the most information available At the To Date field specify the end of the date range by making a selection from any of the pull down menus for month 1 12 day 1 31 or year 1998 2009 22 8E6 TECHNOLOGIES ENTERPRISE REPORTER EVALUATION GUIDE CONFIGURE TEST THE ENTERPRISE REPORTER CREATE A CUSTOM REPORT FOR A SPECIFIC USER At the From Time fi
68. ults that include search string information Search string content includes the actual text typed into a search engine text box on popular search engine sites such as Google Yahoo Ask com and MSN For example if the end user typed in recipes for chicken breast in a search engine request that entire string will appear in this column not simply the blocked keywords within the request This depth of detail helps clarify the intent of the end user which helps tremendously in investigations custom non OTHER CO TICES ums F Catagory E Faw scia Kat tegen tapet p De 15 DNR 1 OO Pune 7 comme Ye gt Sant bey Zar Ding Cescenirg Geer F cotet Sone Cater Reged D Depia Prt 1 000 seconde oe F tench are Mew fg Come eget Search String column In the next section this guide will go through the final step in a typical investiga tion creating a Specific User Custom Report Dep TECHNOLOGIES ENTERPRISE REPORTER EVALUATION GUIDE 21 CONFIGURE TEST THE ENTERPRISE REPORTER CREATE A CUSTOM REPORT FOR A SPECIFIC USER Create a Custom Report for a specific user After reviewing the detail drill down report ifthe administrator is confident that an individual has violated the Internet Acceptable Use Policy AUP the most common step to take next is to run a custom report for this specific individual that covers a greater time period period While there are several ways to accomplish this in the Enterprise Reporter this g
69. ur mail server The maximum size of an email message is often two or three MB Please consult your mail server administrator for more information about email size restrictions After the report is generated in the specified file format the Email Result pop up box displays this message The report has been sent to the following address es and lists the email address es below Email Result Microsoft Internet Explorer IOl x The report has been sent to the following address es e jthomas logo com e tiohnson logo com Email Result pop up box 5 Click the X in the upper right corner of the Email Result pop up box to close it View and print options The view and print options for exporting reports let you view print the report in the specified file format The view option lets you make any necessary adjustments to your report file settings prior to printing the report To print the report you must have a printer configured for your workstation Click the View button to begin generating the report in the specified file format As a result of this action a window opens displaying the following message Please wait for your report to be generated After the report is generated in the specified file format the finished report displays in the browser window LS NOTE Reports generated in the format for MS DOS Text Comma Delimited Text or Excel Chinese or English will display a single row of text for e

Download Pdf Manuals

Related Search

Related Contents

ZyXEL E-iCard, Kaspersky AV, 1Y, USG 1000  Q-Logic 4000 SERIES Network Card User Manual  Texte intégral PDF (648 ko)  Samsung GX HX-DE015EB  Black & Decker RC400/RC500 Use & Care Manual  平成27年度 科学研究費助成事業等 執 行 要 領  Sony CDX-GT57UP Installation/Connections Manual  主文 1 原告の請求をいずれも棄却する。 2 訴訟費用は，原告の負担と  the user manual - Info  Les rencontres-débats - Réseau Rural Français  

Copyright © All rights reserved. Failed to retrieve file