Documentation | Support

Go to the table of contents Go to the previous page Go to the next page View or print as PDF
Content Gateway Analysis > Reporting on advanced real-time analysis
Reporting on advanced real-time analysis
Administrator Help | Forcepoint Web Security | v8.5.x
Related topics:
*
Configuring Content Gateway analysis
*
Configuring content categorization
*
Configuring file analysis
*
Content stripping
After you install Content Gateway and enter a key that enables the advanced analysis features, you can see and analyze the effects of these features on the dashboard, and with presentation and investigative reports.
On the Usage dashboard, by default, 2 charts tally requests to Web 2.0 sites over the past 30 days:
*
Web 2.0 Categories
*
Web 2.0 URL Bandwidth
See The Status Dashboards for information about customizing the charts or moving them to a different dashboard tab.
On the Presentation Reports page, the Scanning Activity group contains reports that focus on Web 2.0 browsing and analysis activity, including recategorization that results from content categorization. There is also a report that tracks page blocks that result from link analysis.
 
* 
Important 
Enable full URL logging (see Configuring how URLs are logged) to ensure that reports of analysis activity are meaningful. Otherwise, reports can display only the domain (www.domain.com) of the site categorized, even though individual pages within the site may fall into different categories, or be recategorized for different reasons.
*
You can copy a security or analysis report template to create a custom report. You can then edit the report filter to refine the information included when you generate that custom report.
*
Some security threat reports include a Threat ID column. Click a individual threat ID to open a Forcepoint Security Labs web page that describes the type of threat.
*
Other presentation reports can contain information on analysis activities, as well as general policy enforcement. For example, the Detail of Full URLs by Category report, found in the Internet Activity group of the Report Catalog, provides a detailed listing of each URL accessed within each category.
To make a report that is specific to advanced analysis:
1.
Copy the Detail of Full URLs by Category report, and edit the report filter for the new custom report.
2.
On the Actions tab, select only permitted and blocked actions that relate to analysis.
3.
On the Options tab, change the report catalog name and report title to identify this as an advanced analysis report.
4.
For example, you might change the name and title to "Advanced Analysis: Full URL Detail by Category."
Investigative reports can also be used to gain insight into advanced analysis activities.
1.
In the Internet use by drop-down list, select Action.
2.
In the resulting report, click an action, such as Category blocked real time, to show a list of drill-down options.
3.
Click the desired drill-down option, such as Category or User.
4.
Click the Hits value or the bar on any row to see related detail.
5.
Click Modify Report, at the top of the page, to add the Full URL column to the report.
See Investigative reports for details on using all the investigative reports features.

Go to the table of contents Go to the previous page Go to the next page View or print as PDF
Content Gateway Analysis > Reporting on advanced real-time analysis
Copyright 2022 Forcepoint. All rights reserved.