X10G logs and reporting

Websense X10G security blades keep detailed logs of activity on the system. These logs are designed to assist you and Websense Technical Support when there is unexpected behavior or a problem. For more information about X10G security blade logs, see X10G security blade logs.

Modules on the X10G security blades by default generate detailed reporting records (usually called "log records") of module usage and actions. This requires installing a Windows-only reporting component (Log Server for Web) on another machine.

To add the Log Server component to your deployment:

Download the TRITON software installer, available from www.mywebsense.com.

Install Log Server on a Windows server with access to:

The Microsoft SQL Server instance that hosts the Log Database

The security blade, so that it can retrieve filtering data from Web components to create log records

Management reports based on filtering log records can be generated using the reporting tools included in the Web Security module of the TRITON Unified Security Center.

 

Important  Except in demonstrations in which only TRITON - Web Security is installed on an X10G security blade and the network includes a small number of users, the TRITON Unified Security Center should be installed on a separate Windows Server 2008 R2 64-bit machine.

Web security reports

When you launch TRITON - Web Security, the Today page shows the operating status of Websense software, and can display charts of Web filtering activities in the network since midnight.

The History page shows charts of Web filtering activities in the network for up to 30 days.

Presentation reports provide customizable graphical and tabular reports of client Internet activity or message filtering activity.

Web mode investigative reports are interactive reports that allow you to drill-down into your data to find the information of most interest to your organization.

Web mode Real-Time Monitor allows you to see what traffic is being filtered by the Filtering Service associated with a Policy Server, and what action is applied to each request.