Reporting on advanced real-time analysis

Administrator Help | TRITON AP-WEB | Version 8.2.x

Related topics:

Configuring Content Gateway analysis

Configuring content categorization

Configuring file analysis

Content stripping

After you install Content Gateway and enter a key that enables the advanced analysis features, you can see and analyze the effects of these features on the dashboard, and with presentation and investigative reports.

On the Usage dashboard, by default, 2 charts tally requests to Web 2.0 sites over the past 30 days:

Web 2.0 Categories

Web 2.0 URL Bandwidth

See The Status Dashboards for information about customizing the charts or moving them to a different dashboard tab.

On the Presentation Reports page, the Scanning Activity group contains reports that focus on Web 2.0 browsing and analysis activity, including recategorization that results from content categorization. There is also a report that tracks page blocks that result from link analysis.


	Important Enable full URL logging (see Configuring how URLs are logged) to ensure that reports of analysis activity are meaningful. Otherwise, reports can display only the domain (www.domain.com) of the site categorized, even though individual pages within the site may fall into different categories, or be recategorized for different reasons.

You can copy a security or analysis report template to create a custom report. You can then edit the report filter to refine the information included when you generate that custom report.

Some security threat reports include a Threat ID column. You can click the individual threat ID to open a Security Labs web page that describes the type of threat identified.

Other presentation reports can contain information on analysis activities, as well as general policy enforcement. For example, the Detail of Full URLs by Category report, found in the Internet Activity group of the Report Catalog, provides a detailed listing of each URL accessed within each category. To make a report that is specific to advanced analysis, copy the Detail of Full URLs by Category report, and edit the report filter for the new custom report. On the Actions tab, select only permitted and blocked actions that relate to analysis. On the Options tab, change the report catalog name and report title to identify this as an advanced analysis report. For example, you might change the name and title to Advanced Analysis: Detail of Full URLs by Category.

Investigative reports can also be used to gain insight into advanced analysis activities.

In the Internet use by drop-down list, select Action.

In the resulting report, click an action, such as Category blocked real time, to show a list of drill-down options.

Click the desired drill-down option, such as Category or User.

Click the Hits value or the bar on any row to see related detail.

Click Modify Report, at the top of the page, to add the Full URL column to the report.

See Investigative reports for details on using all the investigative reports features.