TRITON - Web Security Help
Websense Web Security Solutions, v7.6

Go to the table of contents Go to the previous page Go to the next page Go to the index View or print as PDF

Related topics:
Use the Reporting > Real-Time Monitor page to review current Internet filtering activity in your network.
Important 
Internet Explorer 8 Compatibility View is not supported with the TRITON console. If Real-Time Monitor does not display correctly in Internet Explorer 8, make sure that Compatibility View button (between the URL and the Refresh button in the browser address bar) is not selected.
Click Start to populate the page with data. The page shows recent Internet requests, including:
*
The IP address or name of the user who made the request.
*
If a user name is longer than 30 characters, a hyphen ("-") and the last 30 characters of the name are displayed. If you right-click to add a long user name to the search filter, delete the hyphen character from the filter field and click Show Results to display matching entries.
*
The URL requested.
If the URL is too long to display in the space provided, the field shows the first 30 characters of the URL, a space, a hyphen ("-"), and a space, and then last 20 characters of the URL. Right-click the truncated URL to see the entire string.
*
The presence of an icon indicates that the site was dynamically recategorized based on the results of scanning. Mouse over the icon to see the original category.
*
No icon indicates that the Master Database category or custom URL category was used. (This includes sites that were scanned by Content Gateway, but not recategorized.)
*
The Category assigned to the site.
The actual category used to filter the request is shown, whether that is the Master Database category, the custom URL category, or the category dynamically assigned as a result of scanning.
*
The Action (permitted or blocked) applied to the request.
*
The Time the request was passed to Real-Time Monitor.
Because Real-Time Monitor receives request information from Usage Monitor in real time, rather than reading the request from the Log Database, the request time shown here may not match the request time that appears in investigative and presentation reports.
To review current data, click Pause to prevent the page from continuing to refresh. When you are ready to start monitoring new information, click Start again.
Depending on your current settings, Real-Time Monitor holds a set number of records (250, 500, or 1000), and will always display the latest set of available records. When you pause display of new records to review current data, this can mean that the hundreds or thousands of requests that occur while the display is paused will never be displayed in the monitor. (The requests are, however, stored in the Log Database, and will appear in investigative and presentation reports.)
1.
Enter all or part of a user name or IP address, URL, category, or action in the Filter results by fields. You can also select a time filter to show the past 5, 10, or 15 minutes worth of applicable results.
2.
Click Show Results.
You can also right-click any entry in the User, URL, Category, or Action fields and select the Filter by or Add...to search filter option to immediately filter results based on the selected string.
1.
Click Customize in the toolbar at the top of the Content pane.
2.
Select a Data refresh rate for the Real-Time Monitor page: 5, 10, 15, 20, 30, or 45 seconds, or 1 minute. The default is 15 seconds.
3.
Select the Number of records shown in Real-Time Monitor: 250, 500, or 1000.
4.
Indicate how URLs should appear in the monitor list. You can choose to show the entire URL, or only the domain portion of the URL (for example, www.google.com).
5.
Click OK to save your changes and close the dialog box.
By default, TRITON Unified Security Center sessions time out after 30 minutes. To run Real-Time Monitor without timing out, click Full Screen to open the monitor in a new window. The IP address of the monitored Policy Server appears in the Real-Time Monitor title bar. If you want to monitor multiple Policy Server instances, see Real-Time Monitor in Multiple Policy Server Deployments for considerations and instructions.


Go to the table of contents Go to the previous page Go to the next page Go to the index View or print as PDF