Your SlideShare is downloading. ×
Sample Proxy Profile - Firewall
Sample Proxy Profile - Firewall
Sample Proxy Profile - Firewall
Sample Proxy Profile - Firewall
Sample Proxy Profile - Firewall
Sample Proxy Profile - Firewall
Sample Proxy Profile - Firewall
Sample Proxy Profile - Firewall
Sample Proxy Profile - Firewall
Sample Proxy Profile - Firewall
Sample Proxy Profile - Firewall
Sample Proxy Profile - Firewall
Sample Proxy Profile - Firewall
Sample Proxy Profile - Firewall
Sample Proxy Profile - Firewall
Sample Proxy Profile - Firewall
Sample Proxy Profile - Firewall
Sample Proxy Profile - Firewall
Sample Proxy Profile - Firewall
Sample Proxy Profile - Firewall
Sample Proxy Profile - Firewall
Sample Proxy Profile - Firewall
Sample Proxy Profile - Firewall
Sample Proxy Profile - Firewall
Sample Proxy Profile - Firewall
Sample Proxy Profile - Firewall
Sample Proxy Profile - Firewall
Sample Proxy Profile - Firewall
Sample Proxy Profile - Firewall
Sample Proxy Profile - Firewall
Sample Proxy Profile - Firewall
Sample Proxy Profile - Firewall
Sample Proxy Profile - Firewall
Sample Proxy Profile - Firewall
Sample Proxy Profile - Firewall
Sample Proxy Profile - Firewall
Sample Proxy Profile - Firewall
Sample Proxy Profile - Firewall
Sample Proxy Profile - Firewall
Sample Proxy Profile - Firewall
Sample Proxy Profile - Firewall
Sample Proxy Profile - Firewall
Sample Proxy Profile - Firewall
Sample Proxy Profile - Firewall
Sample Proxy Profile - Firewall
Sample Proxy Profile - Firewall
Sample Proxy Profile - Firewall
Sample Proxy Profile - Firewall
Sample Proxy Profile - Firewall
Sample Proxy Profile - Firewall
Sample Proxy Profile - Firewall
Sample Proxy Profile - Firewall
Sample Proxy Profile - Firewall
Sample Proxy Profile - Firewall
Sample Proxy Profile - Firewall
Sample Proxy Profile - Firewall
Sample Proxy Profile - Firewall
Sample Proxy Profile - Firewall
Sample Proxy Profile - Firewall
Sample Proxy Profile - Firewall
Sample Proxy Profile - Firewall
Sample Proxy Profile - Firewall
Sample Proxy Profile - Firewall
Sample Proxy Profile - Firewall
Sample Proxy Profile - Firewall
Sample Proxy Profile - Firewall
Sample Proxy Profile - Firewall
Sample Proxy Profile - Firewall
Sample Proxy Profile - Firewall
Sample Proxy Profile - Firewall
Sample Proxy Profile - Firewall
Sample Proxy Profile - Firewall
Sample Proxy Profile - Firewall
Sample Proxy Profile - Firewall
Sample Proxy Profile - Firewall
Sample Proxy Profile - Firewall
Sample Proxy Profile - Firewall
Sample Proxy Profile - Firewall
Sample Proxy Profile - Firewall
Sample Proxy Profile - Firewall
Sample Proxy Profile - Firewall
Sample Proxy Profile - Firewall
Sample Proxy Profile - Firewall
Sample Proxy Profile - Firewall
Sample Proxy Profile - Firewall
Sample Proxy Profile - Firewall
Sample Proxy Profile - Firewall
Sample Proxy Profile - Firewall
Sample Proxy Profile - Firewall
Sample Proxy Profile - Firewall
Sample Proxy Profile - Firewall
Sample Proxy Profile - Firewall
Sample Proxy Profile - Firewall
Sample Proxy Profile - Firewall
Sample Proxy Profile - Firewall
Sample Proxy Profile - Firewall
Sample Proxy Profile - Firewall
Sample Proxy Profile - Firewall
Sample Proxy Profile - Firewall
Sample Proxy Profile - Firewall
Sample Proxy Profile - Firewall
Sample Proxy Profile - Firewall
Sample Proxy Profile - Firewall
Sample Proxy Profile - Firewall
Upcoming SlideShare
Loading in...5
×

Thanks for flagging this SlideShare!

Oops! An error has occurred.

×
Saving this for later? Get the SlideShare app to save on your phone or tablet. Read anywhere, anytime – even offline.
Text the download link to your phone
Standard text messaging rates apply

Sample Proxy Profile - Firewall

2,732

Published on

0 Comments
0 Likes
Statistics
Notes
  • Be the first to comment

  • Be the first to like this

No Downloads
Views
Total Views
2,732
On Slideshare
0
From Embeds
0
Number of Embeds
0
Actions
Shares
0
Downloads
7
Comments
0
Likes
0
Embeds 0
No embeds

Report content
Flagged as inappropriate Flag as inappropriate
Flag as inappropriate

Select your reason for flagging this presentation as inappropriate.

Cancel
No notes for slide

Transcript

  • 1. Sample Proxy Profile - Firewall Log Analysis Custom Report January 2002 Report Range: Jan 8, 2002 - Jan 21, 2002 www.netiq.com
  • 2. Table Of Contents General Proxy Statistics.......................................................................................5 Top Sites................................................................................................................7 Top Sites by User................................................................................................10 Top Sites by Authenticated User......................................................................13 Top Pages............................................................................................................16 Top File Types.....................................................................................................19 Top Download Files............................................................................................21 Top Users.............................................................................................................23 Top Users by Site................................................................................................26 Top Authenticated Users...................................................................................30 Top Authenticated Users by Site......................................................................32 Top Core Categories...........................................................................................35 Top Core Category Pages..................................................................................37 Core Category Visits by User............................................................................39 Users Visiting Core Categories.........................................................................41 Users Visiting Sites in Core Categories...........................................................43 Users Visiting Pages in Core Categories.........................................................45 Core Category Visits by Authenticated User...................................................47 Authenticated Users Visiting Core Categories................................................49 Authenticated Users Visiting Sites in Core Categories..................................51 Authenticated Users Visiting Pages in Core Categories................................53 www.netiq.com 2
  • 3. Top General Categories ....................................................................................55 Top General Category Pages ............................................................................58 General Categories by User ..............................................................................61 Users Visiting General Categories ...................................................................65 Users Visiting Sites in General Categories......................................................69 General Category Visits by Authenticated Users............................................72 Authenticated Users Visiting General Categories..........................................75 Authenticated Users Visiting Sites in General Categories.............................78 Top-Level Domain Types...................................................................................81 Top Countries......................................................................................................83 Activity Summary................................................................................................85 Kbytes over Time................................................................................................86 Activity by Day of the Week...............................................................................88 Activity by Hour of the Day................................................................................90 Proxy Cache........................................................................................................92 Proxy Cache Details...........................................................................................94 Client Errors........................................................................................................95 Top Browsers......................................................................................................96 Top Search Engines...........................................................................................98 Top Search Keywords........................................................................................99 Top Platforms....................................................................................................100 Analytical Statistics..........................................................................................102 www.netiq.com 3
  • 4. www.netiq.com 4
  • 5. General Proxy Statistics This page provides a basic summary of proxy activity. Kbytes Over Time 2,000 1,800 1,600 1,400 1,200 1,000 800 600 400 200 0 Jan 09 Jan 11 Jan 13 Jan 15 Jan 17 Jan 19 Jan 21 Jan 08 Jan 10 Jan 12 Jan 14 Jan 16 Jan 18 Jan 20 General Proxy Statistics Visits 109 7.786 Unique Users 24 1.714 Sites Visited 58 4.143 Hits 590 42.143 Kbytes Transferred 15,755 1,125.357 Page Views 67 4.786 Dates and Times Time Frame Custom Start Time for Statistics Shown 01/08/2002 00:00:00 End Time for Statistics Shown 01/21/2002 23:59:59 Earliest Data within Range 01/08/2002 01:53:23 Latest Data within Range 01/21/2002 11:32:27 Content DB Last Updated 03/22/2004 15:54:49 Report Creation Time 03/22/2004 15:55:08 General Proxy Statistics - Help Card Content Database - The database containing the content from which Security Reporting Center reports are generated. Hit - A single action on the server as it appears in the log file. Each file requested by a visitor registers as a hit. There can be several hits on each Web page. While the volume of hits reflects www.netiq.com 5
  • 6. General Proxy Statistics - Help Card the amount of server traffic, it is not an accurate reflection of the number of pages viewed. Kbytes - Short for kilobytes. A kilobyte is 1024 bytes. Page View - One instance of a user accessing a page on the World Wide Web. Potentially, any static or dynamic Web content may be defined as a page by a Security Reporting Center System Admin. Typically, a page includes all static content, such as complete html pages. Dynamic Web content, which is created with variables and does not exist anywhere in a static form, may be considered as a page if the administrator wishes to include it in reports. Site - A location on the World Wide Web comprising one or more related pages that are owned or managed by the same individual, company, or organization. A site may be the central access point for a group of Web pages or a group of files available for download, as with an FTP site. It is usually identified by the Web address of its central access page, the home page. Visit - A session of activity, including all hits, for one user of a Web or FTP site, or for one user of a category. Use this page as an overview of outgoing Web activity in your network, including the number of site visits, the number of unique users, the number of visited sites, the number of hits, the amount of data transferred, and the number of pages viewed during the report period. Individual report chapters provide details on the general statistics provided on this page. www.netiq.com 6
  • 7. Top Sites This page shows the top Web and FTP sites users accessed by number of hits and site visits. Top Sites by Visits over Time w w w .unknow n.com 4 w w w .abc.com 3 w w w .alphasoftw are.com 2 w w w .domain.com 1 w w w .hello.com 0 Jan 09 Jan 11 Jan 13 Jan 15 Jan 17 Jan 19 Jan 21 Jan 08 Jan 10 Jan 12 Jan 14 Jan 16 Jan 18 Jan 20 Top Sites By Visits 13 12 11 10 9 8 7 6 5 4 3 2 1 0 2 4 6 8 10 12 14 16 18 20 1 3 5 7 9 11 13 15 17 19 1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 www.netiq.com 7
  • 8. Top Sites Site Hits Visits www.unknown.com 13 13 9.09% 1. www.alphasoftware.com 158 12 8.39% 2. www.abc.com 12 12 8.39% 3. www.domain.com 12 12 8.39% 4. www.hello.com 12 12 8.39% 5. www.test.com 12 12 8.39% 6. www.egsoftware.com 6 6 4.19% 7. us.yimg.com 11 4 2.79% 8. www7.cnn.com 19 3 2.09% 9. www.suck.com 30 2 1.39% 10. www.playboy.com 26 2 1.39% 11. web.zdnet.com 21 2 1.39% 12. www7.yahoo.com 12 2 1.39% 13. 205.24.125.15 2 2 1.39% 14. p5.yahoo.com 2 2 1.39% 15. www.other.com 2 2 1.39% 16. www.prnewswire.com 2 2 1.39% 17. www.casino.com 18 1 0.69% 18. www.amazon.com 17 1 0.69% 19. www.espn.com 16 1 0.69% 20. Subtotal 403 105 73.42% Other 187 38 26.57% Total 590 143 100.00% Top Sites - Help Card Hit - A single action on the server as it appears in the log file. Each file requested by a visitor registers as a hit. There can be several hits on each Web page. While the volume of hits reflects www.netiq.com 8
  • 9. Top Sites - Help Card the amount of server traffic, it is not an accurate reflection of the number of pages viewed. Site - A location on the World Wide Web comprising one or more related pages that are owned or managed by the same individual, company, or organization. A site may be the central access point for a group of Web pages or a group of files available for download, as with an FTP site. It is usually identified by the Web address of its central access page, the home page. Visit - A session of activity, including all hits, for one user of a Web or FTP site, or for one user of a category. Use this page for an overview of the most popular Web and FTP sites accessed by users in your organization. www.netiq.com 9
  • 10. Top Sites by User This page shows the Web and FTP sites most frequently accessed through the proxy server and the users who accessed them. Top Sites by Visits over Time w w w .unknow n.com 4 w w w .abc.com 3 w w w .alphasoftw are.com 2 w w w .domain.com 1 w w w .hello.com 0 Jan 09 Jan 11 Jan 13 Jan 15 Jan 17 Jan 19 Jan 21 Jan 08 Jan 10 Jan 12 Jan 14 Jan 16 Jan 18 Jan 20 Top Sites by Visits 13 12 11 10 9 8 7 6 5 4 3 2 1 0 2 4 6 8 10 12 14 16 18 20 1 3 5 7 9 11 13 15 17 19 1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 www.netiq.com 10
  • 11. Top Sites by User Site User Hits Visits Time Kbytes www.unknown.com 192.168.99.25 6 6 00:00:00 854 1. 192.168.99.245 4 4 00:00:00 570 richardg.internal.webtr 2 2 00:00:00 157 ends.com WEBTRENDS-NT 1 1 00:00:00 71 Total 13 13 00:00:00 1,652 www.abc.com 192.168.99.212 12 12 00:00:00 1,709 2. www.alphasoftware.co jasong.internal.webtre 158 12 00:15:45 1,082 3. m nds.com www.domain.com 192.168.99.29 6 6 00:00:00 2,133 4. 192.168.99.269 4 4 00:00:00 570 richardg.internal.webtr 2 2 00:00:00 157 ends.com Total 12 12 00:00:00 2,860 www.hello.com 192.168.99.28 6 6 00:00:00 854 5. 192.168.99.278 4 4 00:00:00 570 richardg.internal.webtr 2 2 00:00:00 157 ends.com Total 12 12 00:00:00 1,581 www.test.com 192.168.99.202 12 12 00:00:00 1,453 6. www.egsoftware.com WEBTRENDS-NT 6 6 00:00:00 429 7. us.yimg.com andreag.internal.webtr 10 2 00:00:02 11 8. ends.com jasong.internal.webtre 1 1 00:00:00 1 nds.com Total 11 3 00:00:02 12 www7.cnn.com andreag.internal.webtr 19 3 00:00:37 118 9. ends.com 205.24.125.15 192.168.99.200 1 1 00:00:00 505 10. 192.168.99.24 1 1 00:00:00 6 Total 2 2 00:00:00 510 p5.yahoo.com andreag.internal.webtr 2 2 00:00:00 52 11. ends.com web.zdnet.com andreag.internal.webtr 21 2 00:00:02 56 12. ends.com www.astrologers.com jasong.internal.webtre 13 2 00:02:02 98 13. nds.com www.deja.com jasong.internal.webtre 11 2 00:00:09 61 14. nds.com www.monsterboard.co jasong.internal.webtre 11 2 00:00:09 61 15. m nds.com www.netiq.com 11
  • 12. Top Sites by User Site User Hits Visits Time Kbytes www.other.com WEBTRENDS-NT 2 2 00:00:00 15 16. www.playboy.com petera.internal.webtre 16 1 00:00:11 57 17. nds.com richardg.internal.webtr 10 1 00:00:02 25 ends.com Total 26 2 00:00:13 82 www.suck.com jasong.internal.webtre 10 1 00:01:03 35 18. nds.com philm.internal.webtren 20 1 00:01:01 71 ds.com Total 30 2 00:02:04 106 www7.yahoo.com andreag.internal.webtr 12 2 00:00:06 15 19. ends.com 151.196.88.246 jasong.internal.webtre 5 1 00:00:09 9 20. nds.com Subtotal 390 106 00:21:18 11,961 Other 200 38 03:05:09 3,794 Total 590 144 03:26:27 15,755 Top Sites by User - Help Card Hit - A single action on the server as it appears in the log file. Each file requested by a visitor registers as a hit. There can be several hits on each Web page. While the volume of hits reflects the amount of server traffic, it is not an accurate reflection of the number of pages viewed. Kbytes - Short for kilobytes. A kilobyte is 1024 bytes. Site - A location on the World Wide Web comprising one or more related pages that are owned or managed by the same individual, company, or organization. A site may be the central access point for a group of Web pages or a group of files available for download, as with an FTP site. It is usually identified by the Web address of its central access page, the home page. User - A client computer identified by a unique IP address. Visit - A session of activity, including all hits, for one user of a Web or FTP site, or for one user of a category. Use this page to see which users accessed the most popular sites during the report period, how often they visited, and how much bandwidth was consumed during each user's visits to a given site. www.netiq.com 12
  • 13. Top Sites by Authenticated User This page shows the Web and FTP sites most frequently accessed through the proxy server and the authenticated users who accessed them. Site visits by non-authenticated users are not included. Top Sites Visited by Authenticated Users by Visits 3 2 1 0 2 4 6 8 10 12 14 16 18 20 1 3 5 7 9 11 13 15 17 19 1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 Top Sites by Authenticated User Site User Hits Visits Time Kbytes www7.cnn.com AndreaG 19 3 8.10% 00:00:37 118 1. p5.yahoo.com AndreaG 2 2 5.40% 00:00:00 52 2. us.yimg.com AndreaG 10 2 5.40% 00:00:02 11 3. web.zdnet.com AndreaG 21 2 5.40% 00:00:02 56 4. www.domain.com RichardG 2 2 5.40% 00:00:00 157 5. www.hello.com RichardG 2 2 5.40% 00:00:00 157 6. www.playboy.com PeterA 16 1 2.70% 00:00:11 57 7. www.netiq.com 13
  • 14. Top Sites by Authenticated User Site User Hits Visits Time Kbytes RichardG 10 1 2.70% 00:00:02 25 Total 26 2 5.40% 00:00:13 82 www.unknown.com RichardG 2 2 5.40% 00:00:00 157 8. www7.yahoo.com AndreaG 12 2 5.40% 00:00:06 15 9. ads1.zdnet.com AndreaG 1 1 2.70% 00:00:00 2 10. e7.zdnet.com AndreaG 1 1 2.70% 00:00:00 11 11. ne1.news.com AndreaG 6 1 2.70% 00:01:18 47 12. www.amazon.com AndreaG 17 1 2.70% 00:10:07 90 13. www.budweiser.com RichardG 6 1 2.70% 00:00:07 32 14. www.century21.com JohnX 15 1 2.70% 00:02:01 101 15. www.comics.org TaraM 10 1 2.70% 00:30:08 58 16. www.deja.com JasonG 8 1 2.70% 00:00:08 46 17. www.desertpalace.c JeremyN 5 1 2.70% 00:00:00 30 18. om www.espn.com PhilM 16 1 2.70% 00:50:00 93 19. www.gamecenter.co TaraM 11 1 2.70% 00:10:00 61 20. m Subtotal 192 30 81.08% 01:44:49 1,376 Other 77 7 18.91% 01:21:17 378 Total 269 37 100.00% 03:06:06 1,754 Top Sites by Authenticated User - Help Card Authenticated User - A user who provided a username and password in order to log on to an FTP or Web site. Hit - A single action on the server as it appears in the log file. Each file requested by a visitor registers as a hit. There can be several hits on each Web page. While the volume of hits reflects the amount of server traffic, it is not an accurate reflection of the number of pages viewed. Kbytes - Short for kilobytes. A kilobyte is 1024 bytes. Site - A location on the World Wide Web comprising one or more related pages that are owned or managed by the same individual, company, or organization. A site may be the central access point for a group of Web pages or a group of files available for download, as with an FTP site. It is usually identified by the Web address of its central access page, the home page. www.netiq.com 14
  • 15. Top Sites by Authenticated User - Help Card User - A client computer identified by a unique IP address. Visit - A session of activity, including all hits, for one user of a Web or FTP site, or for one user of a category. Use this page to focus on sites that required a login and the users who accessed them. Site visits by non-authenticated users are not included. www.netiq.com 15
  • 16. Top Pages This page lists the top pages your proxy server accessed on the Internet. Top Pages by Visits over Time http://w w w .alphasoftw are.com/cleanpro/index.html 2 http://151.196.88.246/ http://151.196.88.246/%20 1 http://inet1.tek.com/Gallery/camera2/ http://ne1.new s.com/ 0 Jan 09 Jan 11 Jan 13 Jan 15 Jan 17 Jan 19 Jan 21 Jan 08 Jan 10 Jan 12 Jan 14 Jan 16 Jan 18 Jan 20 Top Pages By Visits 12 11 10 9 8 7 6 5 4 3 2 1 0 2 4 6 8 10 12 14 16 18 20 1 3 5 7 9 11 13 15 17 19 1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 www.netiq.com 16
  • 17. Top Pages Page Visits Views Avg. Time http://www.domain.com/INTL/swell.asp 12 20.33% 12 00:00:00 1. http://p5.yahoo.com/ 2 3.39% 2 00:00:04 2. http://www.alphasoftware.com/cleanpr 2 3.39% 5 00:00:15 3. o/index.html http://www.playboy.com/ 2 3.39% 2 00:00:02 4. http://www.suck.com/almanac/wx/pdx. 2 3.39% 3 00:00:57 5. shtml http://151.196.88.246/ 1 1.69% 1 00:00:00 6. http://151.196.88.246/%20 1 1.69% 1 00:00:09 7. http://inet1.tek.com/Gallery/camera2/ 1 1.69% 1 00:00:09 8. http://ne1.news.com/ 1 1.69% 1 00:00:00 9. http://p6.yahoo.com/ 1 1.69% 1 00:00:00 10. http://q9.yahoo.com/quotes 1 1.69% 1 00:00:50 11. http://web.zdnet.com/ 1 1.69% 1 00:00:00 12. http://web.zdnet.com/home/filters/main 1 1.69% 1 00:00:00 13. a.html http://www.alphasoftware.com/antiviru 1 1.69% 1 00:00:20 14. s/index.html http://www.amazon.com/ 1 1.69% 2 00:00:07 15. http://www.amazon.com/creed/index.ht 1 1.69% 2 00:09:53 16. ml http://www.astrologers.com/ 1 1.69% 1 00:00:00 17. http://www.budweiser.com/ 1 1.69% 1 00:00:00 18. http://www.casino.com/ 1 1.69% 1 00:00:12 19. http://www.century21.com/ 1 1.69% 1 00:00:07 20. Subtotal 35 59.32% 41 00:13:05 Other 24 40.67% 26 01:03:07 Total 59 100.00% 67 01:16:12 Top Pages - Help Card Page - Potentially, any static or dynamic Web content defined as a page by a Security Reporting Center System Admin. Typically a page includes all static content, such as complete html www.netiq.com 17
  • 18. Top Pages - Help Card pages. Dynamic Web content, which is created with variables and does not exist anywhere in a static form, may be considered as a page if the administrator wishes to include it in reports. View - An instance where a user accesses one Web or FTP page. Visit - A session of activity, including all hits, for one user of a Web or FTP site, or for one user of a category. This page ranks the Web and FTP pages your users accessed by the number of visits and page views. It also shows the average time spent on each page, allowing you to assess how often your users accessed each page and how much time was consumed there during the report period. www.netiq.com 18
  • 19. Top File Types This page shows the file types users downloaded, how many of each type were downloaded, and the total number of kilobytes downloaded for each file type. Top File Types by File Count 400 360 320 280 240 200 160 120 80 40 0 2 4 6 8 1 3 5 7 9 1 2 3 4 5 6 7 8 9 Top File Types File type File Count Kbytes *.gif 373 71.18% 6,429 1. *.jpg 97 18.51% 613 2. *.html 21 4.00% 218 3. *.log 14 2.67% 3,193 4. *.asp 12 2.29% 2,860 5. *.shtml 3 0.57% 34 6. *.zip 2 0.38% 3 7. *.class 1 0.19% 26 www.netiq.com 19
  • 20. Top File Types File type File Count Kbytes 8. *.exe 1 0.19% 1 9. Total 524 100.00% 13,376 Top File Types - Help Card File Type - A specific type of file format. Different file types are identified by their file extensions or suffixes, such as .htm, .gif, or .asp. Files may exist permanently in static form or be generated dynamically when a user accesses a page on the World Wide Web. A Security Reporting Center administrator defines which file types can be included in reports and whether or not to include dynamically-generated files of each type. Kbytes - Short for kilobytes. A kilobyte is 1024 bytes. This information can be helpful in tracking usage patterns in order to monitor and enforce network security policies. For example, you can determine whether downloading particular types of images or programs is consuming a large amount of bandwidth. www.netiq.com 20
  • 21. Top Download Files This page shows the filenames of the files most frequently downloaded through your proxy server. Top Downloaded Files by Count over Time http://w w w .century21.com/forsale/eastside.zip 2 1 http://w eb.zdnet.com/dow nloads/games/fps/quake3.e 0 Jan 09 Jan 11 Jan 13 Jan 15 Jan 17 Jan 19 Jan 21 Jan 08 Jan 10 Jan 12 Jan 14 Jan 16 Jan 18 Jan 20 Top Downloaded Files by Count 2 1 0 2 1 1 2 Top Download Files File Download Count Visits http://www.century21.com/forsale/eastside. 2 66.66% 1 1. zip http://web.zdnet.com/downloads/games/fps 1 33.33% 1 2. /quake3.exe Total 3 100.00% 2 www.netiq.com 21
  • 22. Top Download Files - Help Card Download - A file downloaded from a Web or FTP site. The list of file types counted as download files is configured by a Security Reporting Center System Admin in the Download File Types panel, and may or may not include files generated dynamically. Visit - A session of activity, including all hits, for one user of a Web or FTP site, or for one user of a category. Use this page to determine the actual files your users downloaded most frequently. www.netiq.com 22
  • 23. Top Users This page shows the most active hostnames or IP addresses connecting to the proxy server. Top Users by Visits over Time jasong.internal.w ebtrends.com 7 6 WEBTRENDS-NT 5 4 andreag.internal.w ebtrends.com 3 192.168.99.124 2 1 192.168.99.14 0 Jan 09 Jan 11 Jan 13 Jan 15 Jan 17 Jan 19 Jan 21 Jan 08 Jan 10 Jan 12 Jan 14 Jan 16 Jan 18 Jan 20 Top Users by Visits 16 14 12 10 8 6 4 2 0 2 4 6 8 10 12 14 16 18 20 1 3 5 7 9 11 13 15 17 19 1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 www.netiq.com 23
  • 24. Top Users User Hits Visits Cost jasong.internal.webtrends.com 250 17 15.59% $8.53 1. 192.168.99.202 12 12 11.00% $7.84 2. 192.168.99.212 12 12 11.00% $9.22 3. WEBTRENDS-NT 9 9 8.25% $2.78 4. 192.168.99.25 7 7 6.42% $6.28 5. 192.168.99.28 6 6 5.50% $4.61 6. 192.168.99.29 6 6 5.50% $11.51 7. andreag.internal.webtrends.com 90 6 5.50% $2.17 8. 192.168.99.200 8 5 4.58% $14.45 9. 192.168.99.245 4 4 3.67% $3.07 10. 192.168.99.269 4 4 3.67% $3.07 11. 192.168.99.278 4 4 3.67% $3.07 12. richardg.internal.webtrends.com 22 3 2.75% $2.85 13. taram.internal.webtrends.com 77 3 2.75% $2.30 14. philm.internal.webtrends.com 36 2 1.83% $0.88 15. 192.168.99.124 1 1 0.91% $0.27 16. 192.168.99.14 2 1 0.91% $0.54 17. 192.168.99.225 1 1 0.91% $0.27 18. 192.168.99.24 1 1 0.91% $0.03 19. 202.98.163.28 1 1 0.91% $0.21 20. Subtotal 553 105 96.33% $83.95 Other 37 4 3.67% $1.12 Total 590 109 100.00% $85.07 Top Users - Help Card Hit - A single action on the server as it appears in the log file. Each file requested by a visitor registers as a hit. There can be several hits on each Web page. While the volume of hits reflects www.netiq.com 24
  • 25. Top Users - Help Card the amount of server traffic, it is not an accurate reflection of the number of pages viewed. Proxy Server - A firewall or other device that intercepts, tracks, manages, and responds to requests to application servers from client computers in a network. For example, a proxy server may forward a user's request for a Web page to a Web server. User - A client computer identified by a unique IP address. Visit - A session of activity, including all hits, for one user of a Web or FTP site, or for one user of a category. Use this page to get a picture of the users who were most active during the report period, the times when they were active, the duration of their visits, and the bandwidth their visits consumed. www.netiq.com 25
  • 26. Top Users by Site This page shows the most active hostnames or IP addresses connecting to the proxy server and the sites they visited most frequently. Top Users by Visits over Time jasong.internal.w ebtrends.com 7 6 WEBTRENDS-NT 5 4 andreag.internal.w ebtrends.com 3 192.168.99.124 2 1 192.168.99.14 0 Jan 09 Jan 11 Jan 13 Jan 15 Jan 17 Jan 19 Jan 21 Jan 08 Jan 10 Jan 12 Jan 14 Jan 16 Jan 18 Jan 20 Top Users by Visits 16 14 12 10 8 6 4 2 0 2 4 6 8 10 12 14 16 18 20 1 3 5 7 9 11 13 15 17 19 1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 www.netiq.com 26
  • 27. Top Users by Site User Site Hits Visits Time Kbytes jasong.internal.webtre www.alphasoftware.co 158 12 00:15:45 1,082 1. nds.com m www.astrologers.com 13 2 00:02:02 98 www.deja.com 11 2 00:00:09 61 www.monsterboard.co 11 2 00:00:09 61 m 151.196.88.246 5 1 00:00:09 9 206.119.169.220 1 1 00:00:00 2 ics.ic3.com 11 1 00:00:21 64 inet1.tek.com 1 1 00:00:00 1 p6.yahoo.com 1 1 00:00:00 26 q9.yahoo.com 1 1 00:00:00 12 us.yimg.com 1 1 00:00:00 1 www.casino.com 18 1 00:00:12 98 www.prnewswire.com 2 1 00:00:01 17 www.suck.com 10 1 00:01:03 35 www6.yahoo.com 6 1 00:00:38 14 Total 250 29 00:20:29 1,580 andreag.internal.webtr www7.cnn.com 19 3 00:00:37 118 2. ends.com p5.yahoo.com 2 2 00:00:00 52 us.yimg.com 10 2 00:00:02 11 web.zdnet.com 21 2 00:00:02 56 www7.yahoo.com 12 2 00:00:06 15 ads1.zdnet.com 1 1 00:00:00 2 e7.zdnet.com 1 1 00:00:00 11 ne1.news.com 6 1 00:01:18 47 www.amazon.com 17 1 00:10:07 90 www1.zdnet.com 1 1 00:00:00 1 Total 90 16 00:12:12 402 192.168.99.202 www.test.com 12 12 00:00:00 1,453 3. 192.168.99.212 www.abc.com 12 12 00:00:00 1,709 4. WEBTRENDS-NT www.egsoftware.com 6 6 00:00:00 429 5. www.other.com 2 2 00:00:00 15 www.unknown.com 1 1 00:00:00 71 Total 9 9 00:00:00 515 192.168.99.200 163.25.24.85 1 1 00:00:00 50 6. 163.25.24.86 1 1 00:00:00 505 165.51.25.83 1 1 00:00:00 50 169.51.20.55 1 1 00:00:00 505 175.25.61.20 1 1 00:00:00 505 205.24.125.15 1 1 00:00:00 505 206.58.83.166 1 1 00:00:00 50 206.58.83.5 1 1 00:00:00 505 www.netiq.com 27
  • 28. Top Users by Site User Site Hits Visits Time Kbytes Total 8 8 00:00:00 2,676 richardg.internal.webtr www.domain.com 2 2 00:00:00 157 7. ends.com www.hello.com 2 2 00:00:00 157 www.unknown.com 2 2 00:00:00 157 www.budweiser.com 6 1 00:00:07 32 www.playboy.com 10 1 00:00:02 25 Total 22 8 00:00:09 528 192.168.99.25 www.unknown.com 6 6 00:00:00 854 8. 165.24.165.2 1 1 00:00:00 310 Total 7 7 00:00:00 1,164 taram.internal.webtren www.comics.org 10 1 00:30:08 58 9. ds.com www.gamecenter.com 11 1 00:10:00 61 www.match.com 10 1 00:30:08 58 www.naawp.com 11 1 00:00:08 61 www.ual.com 11 1 00:10:00 61 www.victoriassecret.c 12 1 00:20:00 64 om www.vintage- 12 1 00:20:00 64 mustang.com Total 77 7 02:00:24 427 192.168.99.28 www.hello.com 6 6 00:00:00 854 10. 192.168.99.29 www.domain.com 6 6 00:00:00 2,133 11. 192.168.99.245 www.unknown.com 4 4 00:00:00 570 12. 192.168.99.269 www.domain.com 4 4 00:00:00 570 13. 192.168.99.278 www.hello.com 4 4 00:00:00 570 14. 192.168.99.14 165.12.158.55 1 1 00:00:00 51 15. 206.58.83.196 1 1 00:00:00 50 Total 2 2 00:00:00 101 philm.internal.webtren www.espn.com 16 1 00:50:00 93 16. ds.com www.suck.com 20 1 00:01:01 71 Total 36 2 00:51:01 164 192.168.99.124 198.48.156.25 1 1 00:00:00 50 17. 192.168.99.225 216.25.214.65 1 1 00:00:00 50 18. 192.168.99.24 205.24.125.15 1 1 00:00:00 6 19. www.netiq.com 28
  • 29. Top Users by Site User Site Hits Visits Time Kbytes 202.98.163.28 151.68.48.127 1 1 00:00:00 40 20. Subtotal 553 140 03:24:15 15,562 Other 37 4 00:02:12 193 Total 590 144 03:26:27 15,755 Top Users by Site - Help Card Hit - A single action on the server as it appears in the log file. Each file requested by a visitor registers as a hit. There can be several hits on each Web page. While the volume of hits reflects the amount of server traffic, it is not an accurate reflection of the number of pages viewed. Kbytes - Short for kilobytes. A kilobyte is 1024 bytes. Proxy Server - A firewall or other device that intercepts, tracks, manages, and responds to requests to application servers from client computers in a network. For example, a proxy server may forward a user's request for a Web page to a Web server. Site - A location on the World Wide Web comprising one or more related pages that are owned or managed by the same individual, company, or organization. A site may be the central access point for a group of Web pages or a group of files available for download, as with an FTP site. It is usually identified by the Web address of its central access page, the home page. User - A client computer identified by a unique IP address. Visit - A session of activity, including all hits, for one user of a Web or FTP site, or for one user of a category. Use this page to see what sites the most active users visited most frequently during the report period. www.netiq.com 29
  • 30. Top Authenticated Users This page shows the most active authenticated users connecting to the proxy server. Top Authenticated Users by Visits over Time AndreaG 2 JasonG JeremyN 1 JohnX PeterA 0 Jan 09 Jan 11 Jan 13 Jan 15 Jan 17 Jan 19 Jan 21 Jan 08 Jan 10 Jan 12 Jan 14 Jan 16 Jan 18 Jan 20 Top Authenticated Users by Visits 6 5 4 3 2 1 0 2 4 6 8 1 3 5 7 1 2 3 4 5 6 7 8 www.netiq.com 30
  • 31. Top Authenticated Users User Hits Visits AndreaG 90 6 33.33% 1. RichardG 22 3 16.66% 2. TaraM 77 3 16.66% 3. PhilM 36 2 11.11% 4. JasonG 8 1 5.55% 5. JeremyN 5 1 5.55% 6. JohnX 15 1 5.55% 7. PeterA 16 1 5.55% 8. Total 269 18 100.00% Top Authenticated Users - Help Card Authenticated User - A user who provided a username and password in order to log on to an FTP or Web site. Hit - A single action on the server as it appears in the log file. Each file requested by a visitor registers as a hit. There can be several hits on each Web page. While the volume of hits reflects the amount of server traffic, it is not an accurate reflection of the number of pages viewed. Proxy Server - A firewall or other device that intercepts, tracks, manages, and responds to requests to application servers from client computers in a network. For example, a proxy server may forward a user's request for a Web page to a Web server. Visit - A session of activity, including all hits, for one user of a Web or FTP site, or for one user of a category. Use this page to focus on the activity of users who provided a user name and password to log into the sites they visited. www.netiq.com 31
  • 32. Top Authenticated Users by Site This page shows the most active authenticated users and the sites they visited most frequently. Top Authenticated Users by Visits over Time AndreaG 2 JasonG JeremyN 1 JohnX PeterA 0 Jan 09 Jan 11 Jan 13 Jan 15 Jan 17 Jan 19 Jan 21 Jan 08 Jan 10 Jan 12 Jan 14 Jan 16 Jan 18 Jan 20 Top Authenticated Users by Visits 6 5 4 3 2 1 0 2 4 6 8 1 3 5 7 1 2 3 4 5 6 7 8 www.netiq.com 32
  • 33. Top Authenticated Users by Site User Site Hits Visits Time Kbytes AndreaG www7.cnn.com 19 3 00:00:37 118 1. p5.yahoo.com 2 2 00:00:00 52 us.yimg.com 10 2 00:00:02 11 web.zdnet.com 21 2 00:00:02 56 www7.yahoo.com 12 2 00:00:06 15 ads1.zdnet.com 1 1 00:00:00 2 e7.zdnet.com 1 1 00:00:00 11 ne1.news.com 6 1 00:01:18 47 www.amazon.com 17 1 00:10:07 90 www1.zdnet.com 1 1 00:00:00 1 Total 90 16 00:12:12 402 RichardG www.domain.com 2 2 00:00:00 157 2. www.hello.com 2 2 00:00:00 157 www.unknown.com 2 2 00:00:00 157 www.budweiser.com 6 1 00:00:07 32 www.playboy.com 10 1 00:00:02 25 Total 22 8 00:00:09 528 TaraM www.comics.org 10 1 00:30:08 58 3. www.gamecenter.com 11 1 00:10:00 61 www.match.com 10 1 00:30:08 58 www.naawp.com 11 1 00:00:08 61 www.ual.com 11 1 00:10:00 61 www.victoriassecret.c 12 1 00:20:00 64 om www.vintage- 12 1 00:20:00 64 mustang.com Total 77 7 02:00:24 427 PhilM www.espn.com 16 1 00:50:00 93 4. www.suck.com 20 1 00:01:01 71 Total 36 2 00:51:01 164 JasonG www.deja.com 8 1 00:00:08 46 5. JeremyN www.desertpalace.co 5 1 00:00:00 30 6. m JohnX www.century21.com 15 1 00:02:01 101 7. PeterA www.playboy.com 16 1 00:00:11 57 8. Total 269 37 03:06:06 1,754 Top Authenticated Users by Site - Help Card Authenticated User - A user who provided a username and password in order to log on to an www.netiq.com 33
  • 34. Top Authenticated Users by Site - Help Card FTP or Web site. Hit - A single action on the server as it appears in the log file. Each file requested by a visitor registers as a hit. There can be several hits on each Web page. While the volume of hits reflects the amount of server traffic, it is not an accurate reflection of the number of pages viewed. Kbytes - Short for kilobytes. A kilobyte is 1024 bytes. Site - A location on the World Wide Web comprising one or more related pages that are owned or managed by the same individual, company, or organization. A site may be the central access point for a group of Web pages or a group of files available for download, as with an FTP site. It is usually identified by the Web address of its central access page, the home page. User - A client computer identified by a unique IP address. Visit - A session of activity, including all hits, for one user of a Web or FTP site, or for one user of a category. Use this information to see what sites the most active authenticated users were visiting during the report period, and how much bandwidth each user consumed while accessing each site. This will assist you in tracking the authenticated users consuming the most resources on the network. The Visits column on this table represents the number of times each user visited the listed site(s). www.netiq.com 34
  • 35. Top Core Categories This page shows the top categories within the Core categories list. Top Core Categories by Visits over Time Adult/Sexually Explicit 1 Drugs Alcohol & Tobacco Gambling Hate Speech 0 Jan 09 Jan 11 Jan 13 Jan 15 Jan 17 Jan 19 Jan 21 Jan 08 Jan 10 Jan 12 Jan 14 Jan 16 Jan 18 Jan 20 Top Core Categories by Visits 2 1 0 2 4 1 3 1 2 3 4 Top Core Categories Category Hits Visits Adult/Sexually Explicit 26 2 33.33% 1. Gambling 23 2 33.33% 2. Drugs, Alcohol & Tobacco 6 1 16.66% 3. www.netiq.com 35
  • 36. Top Core Categories Category Hits Visits Hate Speech 11 1 16.66% 4. Total 66 6 100.00% Top Core Categories - Help Card Category - A group of Web sites identified in the URL Categorization database for tracking purposes, according to the type of content they represent. For example, the Gambling category may contain the addresses of Web sites for online betting. Core Category - One of several specified categories of Web sites that may contain content that is objectionable or related to illegal activity. The SurfControl database used by Security Reporting Center includes five Core categories: Sexually Explicit, Violence, Hate Speech, Gambling, and Drugs/Alcohol. Hit - A single action on the server as it appears in the log file. Each file requested by a visitor registers as a hit. There can be several hits on each Web page. While the volume of hits reflects the amount of server traffic, it is not an accurate reflection of the number of pages viewed. Visit - A session of activity, including all hits, for one user of a Web or FTP site, or for one user of a category. Use this page to see an overview of potentially sensitive Web content accessed by users in your network during the report period. Note that some ISPs and Web hosting services host several sites on one server. These sites are referred to as virtual sites. Virtual sites have at least two hostnames: the hostname of the virtual site and the hostname of the server computer. The hostname used for URL Categorization depends on how the firewall or proxy server records this information. If both are recorded, reports use the virtual hostname. www.netiq.com 36
  • 37. Top Core Category Pages This page shows the top Web pages within the Core categories. Top Core Category Pages by Visits over Time http://w w w .budw eiser.com/ 1 http://w w w .casino.com/ http://w w w .desertpalace.com/ http://w w w .naaw p.com/ http://w w w .naaw p.com/creed/index.html 0 Jan 09 Jan 11 Jan 13 Jan 15 Jan 17 Jan 19 Jan 21 Jan 08 Jan 10 Jan 12 Jan 14 Jan 16 Jan 18 Jan 20 Top Core Category Pages by Visits 2 1 0 2 4 6 1 3 5 1 2 3 4 5 6 www.netiq.com 37
  • 38. Top Core Category Pages Page Category Views Visits http://www.playboy.com/ Adult/Sexually 2 2 28.57% 1. Explicit http://www.budweiser.com/ Drugs, 1 1 14.28% 2. Alcohol & Tobacco http://www.casino.com/ Gambling 1 1 14.28% 3. http://www.desertpalace.com/ Gambling 1 1 14.28% 4. http://www.naawp.com/ Hate Speech 1 1 14.28% 5. http://www.naawp.com/creed/inde Hate Speech 1 1 14.28% 6. x.html Total 7 7 100.00% Top Core Category Pages - Help Card Category - A group of Web sites identified in the URL Categorization database for tracking purposes, according to the type of content they represent. For example, the Gambling category may contain the addresses of Web sites for online betting. Core Category - One of several specified categories of Web sites that may contain content that is objectionable or related to illegal activity. The SurfControl database used by Security Reporting Center includes five Core categories: Sexually Explicit, Violence, Hate Speech, Gambling, and Drugs/Alcohol. Page - Potentially, any static or dynamic Web content defined as a page by a Security Reporting Center System Admin. Typically a page includes all static content, such as complete html pages. Dynamic Web content, which is created with variables and does not exist anywhere in a static form, may be considered as a page if the administrator wishes to include it in reports. View - An instance where a user accesses one Web or FTP page. Visit - A session of activity, including all hits, for one user of a Web or FTP site, or for one user of a category. Use this page to learn what specific pages from sites in the Core categories are accessed most frequently by users in your network. www.netiq.com 38
  • 39. Core Category Visits by User This page shows the top Core categories accessed through the proxy server and the hostnames or IP addresses of the users who accessed them. Top Core Categories by Visits over Time Adult/Sexually Explicit 1 Drugs Alcohol & Tobacco Gambling Hate Speech 0 Jan 09 Jan 11 Jan 13 Jan 15 Jan 17 Jan 19 Jan 21 Jan 08 Jan 10 Jan 12 Jan 14 Jan 16 Jan 18 Jan 20 Top Core Categories by Visits 2 1 0 2 4 1 3 1 2 3 4 Core Category Visits by User Category User Hits Visits Time Kbytes Adult/Sexually petera.internal.webtrends.com 16 1 00:00:11 57 1. Explicit richardg.internal.webtrends.co 10 1 00:00:02 25 m Total 26 2 00:00:13 82 Gambling jasong.internal.webtrends.com 18 1 00:00:06 98 www.netiq.com 39
  • 40. Core Category Visits by User Category User Hits Visits Time Kbytes 2. jeremyn.internal.webtrends.co 5 1 00:00:00 30 m Total 23 2 00:00:06 127 Drugs, richardg.internal.webtrends.co 6 1 00:00:07 32 3. Alcohol & m Tobacco Hate Speech taram.internal.webtrends.com 11 1 00:00:08 61 4. Total 66 6 00:00:34 302 Core Category Visits by User - Help Card Category - A group of Web sites identified in the URL Categorization database for tracking purposes, according to the type of content they represent. For example, the Gambling category may contain the addresses of Web sites for online betting. Core Category - One of several specified categories of Web sites that may contain content that is objectionable or related to illegal activity. The SurfControl database used by Security Reporting Center includes five Core categories: Sexually Explicit, Violence, Hate Speech, Gambling, and Drugs/Alcohol. Hit - A single action on the server as it appears in the log file. Each file requested by a visitor registers as a hit. There can be several hits on each Web page. While the volume of hits reflects the amount of server traffic, it is not an accurate reflection of the number of pages viewed. Kbytes - Short for kilobytes. A kilobyte is 1024 bytes. User - A client computer identified by a unique IP address. View - An instance where a user accesses one Web or FTP page. Visit - A session of activity, including all hits, for one user of a Web or FTP site, or for one user of a category. Use this page to see which users most frequently visited the sites in the top Core categories, resulting in their inclusion in the Top Core Categories ranking. This information can be used to help enforce policies for acceptable use of Internet resources. The Visits column in this table represents the number of times each user visited the listed site(s). Note that some ISPs and Web hosting services host several sites on one server. These sites are referred to as virtual sites. Virtual sites have at least two hostnames: the hostname of the virtual site and the hostname of the server computer. The hostname used for URL Categorization depends on how the firewall or proxy server records this information. If both are recorded, reports use the virtual hostname. www.netiq.com 40
  • 41. Users Visiting Core Categories This page shows the most active users who accessed Core categories, and the Core categories they visited the most frequently. Users Visiting Core Categories by Visits 2 1 0 2 4 1 3 5 1 2 3 4 5 Users Visiting Core Categories User Category Hits Visits Time Kbytes Cost richardg.internal.webtre Adult/Sexu 10 1 00:00:02 25 $0.13 1. nds.com ally Explicit Drugs, 6 1 00:00:07 32 $0.17 Alcohol & Tobacco Total 16 2 00:00:09 57 $0.30 jasong.internal.webtren Gambling 18 1 00:00:06 98 $0.52 2. ds.com jeremyn.internal.webtre Gambling 5 1 00:00:00 30 $0.16 3. nds.com petera.internal.webtrend Adult/Sexu 16 1 00:00:11 57 $0.30 4. s.com ally Explicit taram.internal.webtrend Hate 11 1 00:00:08 61 $0.32 5. s.com Speech Other 0 0 00:00:00 -1 $0.03 www.netiq.com 41
  • 42. Users Visiting Core Categories User Category Hits Visits Time Kbytes Cost Total 66 6 00:00:34 302 $1.63 Users Visiting Core Categories - Help Card Category - A group of Web sites identified in the URL Categorization database for tracking purposes, according to the type of content they represent. For example, the Gambling category may contain the addresses of Web sites for online betting. Core Category - One of several specified categories of Web sites that may contain content that is objectionable or related to illegal activity. The SurfControl database used by Security Reporting Center includes five Core categories: Sexually Explicit, Violence, Hate Speech, Gambling, and Drugs/Alcohol. Hit - A single action on the server as it appears in the log file. Each file requested by a visitor registers as a hit. There can be several hits on each Web page. While the volume of hits reflects the amount of server traffic, it is not an accurate reflection of the number of pages viewed. Kbytes - Short for kilobytes. A kilobyte is 1024 bytes. User - A client computer identified by a unique IP address. Visit - A session of activity, including all hits, for one user of a Web or FTP site, or for one user of a category. Use this page to focus on the most active visitors to Core categories and determine how much time and bandwidth they expended during their visits. Note that some ISPs and Web hosting services host several sites on one server. These sites are referred to as virtual sites. Virtual sites have at least two hostnames: the hostname of the virtual site and the hostname of the server computer. The hostname used for URL Categorization depends on how the firewall or proxy server records this information. If both are recorded, reports use the virtual hostname. www.netiq.com 42
  • 43. Users Visiting Sites in Core Categories This page shows the users who most frequently visited sites within the Core categories. Users Visiting Pages in Core Categories by Visits in 2 1 0 2 4 1 3 5 1 2 3 4 5 Users Visiting Sites in Core Categories User Site Category Hits Visits Time Kbytes richardg.internal. www.budweis Drugs, 6 1 00:00:07 32 1. webtrends.com er.com Alcohol & Tobacco www.playboy. Adult/Sexu 10 1 00:00:02 25 com ally Explicit Total 16 2 00:00:09 57 jasong.internal.w www.casino.c Gambling 18 1 00:00:06 98 2. ebtrends.com om jeremyn.internal. www.desertpa Gambling 5 1 00:00:00 30 3. webtrends.com lace.com petera.internal.w www.playboy. Adult/Sexu 16 1 00:00:11 57 4. ebtrends.com com ally Explicit taram.internal.we www.naawp.c Hate 11 1 00:00:08 61 5. btrends.com om Speech Total 66 6 00:00:34 302 www.netiq.com 43
  • 44. Users Visiting Sites in Core Categories - Help Card Category - A group of Web sites identified in the URL Categorization database for tracking purposes, according to the type of content they represent. For example, the Gambling category may contain the addresses of Web sites for online betting. Core Category - One of several specified categories of Web sites that may contain content that is objectionable or related to illegal activity. The SurfControl database used by Security Reporting Center includes five Core categories: Sexually Explicit, Violence, Hate Speech, Gambling, and Drugs/Alcohol. Hit - A single action on the server as it appears in the log file. Each file requested by a visitor registers as a hit. There can be several hits on each Web page. While the volume of hits reflects the amount of server traffic, it is not an accurate reflection of the number of pages viewed. Kbytes - Short for kilobytes. A kilobyte is 1024 bytes. Site - A location on the World Wide Web comprising one or more related pages that are owned or managed by the same individual, company, or organization. A site may be the central access point for a group of Web pages or a group of files available for download, as with an FTP site. It is usually identified by the Web address of its central access page, the home page. User - A client computer identified by a unique IP address. Visit - A session of activity, including all hits, for one user of a Web or FTP site, or for one user of a category. Use this page to see what Core category sites each of the top users visited most frequently and how much time and bandwidth they expended while visiting those sites. Note that some ISPs and Web hosting services host several sites on one server. These sites are referred to as virtual sites. Virtual sites have at least two hostnames: the hostname of the virtual site and the hostname of the server computer. The hostname used for URL Categorization depends on how the firewall or proxy server records this information. If both are recorded, reports use the virtual hostname. www.netiq.com 44
  • 45. Users Visiting Pages in Core Categories This page shows the users who most frequently visited pages within the Core categories. Users Visiting Core Categories by Visits 2 1 0 2 4 1 3 5 1 2 3 4 5 Users Visiting Pages in Core Categories User Page Category Hits Visits Time Kbytes richardg.internal. http://www.bu Drugs, 1 1 00:00:00 26 1. webtrends.com dweiser.com/ Alcohol & Tobacco http://www.pla Adult/Sexu 1 1 00:00:00 5 yboy.com/ ally Explicit Total 2 2 00:00:00 31 taram.internal.we http://www.na Hate 1 1 00:00:00 3 2. btrends.com awp.com/ Speech http://www.na Hate 1 1 00:00:00 9 awp.com/cree Speech d/index.html Total 2 2 00:00:00 12 jasong.internal.w http://www.ca Gambling 1 1 00:00:00 16 3. ebtrends.com sino.com/ jeremyn.internal. http://www.de Gambling 1 1 00:00:00 4 4. webtrends.com sertpalace.co www.netiq.com 45
  • 46. Users Visiting Pages in Core Categories User Page Category Hits Visits Time Kbytes m/ petera.internal.w http://www.pla Adult/Sexu 1 1 00:00:00 5 5. ebtrends.com yboy.com/ ally Explicit Total 7 7 00:00:00 67 Users Visiting Pages in Core Categories - Help Card Category - A group of Web sites identified in the URL Categorization database for tracking purposes, according to the type of content they represent. For example, the Gambling category may contain the addresses of Web sites for online betting. Core Category - One of several specified categories of Web sites that may contain content that is objectionable or related to illegal activity. The SurfControl database used by Security Reporting Center includes five Core categories: Sexually Explicit, Violence, Hate Speech, Gambling, and Drugs/Alcohol. Hit - A single action on the server as it appears in the log file. Each file requested by a visitor registers as a hit. There can be several hits on each Web page. While the volume of hits reflects the amount of server traffic, it is not an accurate reflection of the number of pages viewed. Kbytes - Short for kilobytes. A kilobyte is 1024 bytes. Page - Potentially, any static or dynamic Web content defined as a page by a Security Reporting Center System Admin. Typically a page includes all static content, such as complete html pages. Dynamic Web content, which is created with variables and does not exist anywhere in a static form, may be considered as a page if the administrator wishes to include it in reports. User - A client computer identified by a unique IP address. Visit - A session of activity, including all hits, for one user of a Web or FTP site, or for one user of a category. Use this page to see what specific pages from the Core Categories list users visited most frequently. This information can be used to help enforce policies for the acceptable use of Internet resources. The Visits column on this table represents the number of times each user visited the listed page in the core categories. www.netiq.com 46
  • 47. Core Category Visits by Authenticated User This page shows the top Core categories accessed through the proxy server and the authenticated users who accessed them. Core Category Visits by Authenticated Users by Visits 2 1 0 2 4 1 3 1 2 3 4 Core Category Visits by Authenticated User Category User Hits Visits Time Kbytes Adult/Sexually PeterA 16 1 00:00:11 57 1. Explicit RichardG 10 1 00:00:02 25 Total 26 2 00:00:13 82 Drugs, RichardG 6 1 00:00:07 32 2. Alcohol & Tobacco Gambling JeremyN 5 1 00:00:00 30 3. Hate Speech TaraM 11 1 00:00:08 61 4. Total 48 5 00:00:28 205 Core Category Visits by Authenticated User - Help Card Authenticated User - A user who provided a username and password in order to log on to an FTP or Web site. Category - A group of Web sites identified in the URL Categorization database for tracking purposes, according to the type of content they represent. For example, the Gambling category may contain the addresses of Web sites for online betting. www.netiq.com 47
  • 48. Core Category Visits by Authenticated User - Help Card Core Category - One of several specified categories of Web sites that may contain content that is objectionable or related to illegal activity. The SurfControl database used by Security Reporting Center includes five Core categories: Sexually Explicit, Violence, Hate Speech, Gambling, and Drugs/Alcohol. Hit - A single action on the server as it appears in the log file. Each file requested by a visitor registers as a hit. There can be several hits on each Web page. While the volume of hits reflects the amount of server traffic, it is not an accurate reflection of the number of pages viewed. Kbytes - Short for kilobytes. A kilobyte is 1024 bytes. User - A client computer identified by a unique IP address. Visit - A session of activity, including all hits, for one user of a Web or FTP site, or for one user of a category. Use this page to find out what Core categories were visited by users who provided a user name and password in order to log on. Note that some ISPs and Web hosting services host several sites on one server. These sites are referred to as virtual sites. Virtual sites have at least two hostnames: the hostname of the virtual site and the hostname of the server computer. The hostname used for URL Categorization depends on how the firewall or proxy server records this information. If both are recorded, reports use the virtual hostname. www.netiq.com 48
  • 49. Authenticated Users Visiting Core Categories This page shows the most active authenticated users connecting to Core categories, and the Core categories they visited most frequently. Authenticated Users Visiting Core Categories by Visit 2 1 0 2 4 1 3 1 2 3 4 Authenticated Users Visiting Core Categories User Category Hits Visits Time Kbytes RichardG Adult/Sexually 10 1 00:00:02 25 1. Explicit Drugs, 6 1 00:00:07 32 Alcohol & Tobacco Total 16 2 00:00:09 57 JeremyN Gambling 5 1 00:00:00 30 2. PeterA Adult/Sexually 16 1 00:00:11 57 3. Explicit TaraM Hate Speech 11 1 00:00:08 61 4. Total 48 5 00:00:28 205 Authenticated Users Visiting Core Categories - Help Card Authenticated User - A user who provided a username and password in order to log on to an FTP or Web site. Category - A group of Web sites identified in the URL Categorization database for tracking purposes, according to the type of content they represent. For example, the Gambling category may contain the addresses of Web sites for online betting. www.netiq.com 49
  • 50. Authenticated Users Visiting Core Categories - Help Card Core Category - One of several specified categories of Web sites that may contain content that is objectionable or related to illegal activity. The SurfControl database used by Security Reporting Center includes five Core categories: Sexually Explicit, Violence, Hate Speech, Gambling, and Drugs/Alcohol. Hit - A single action on the server as it appears in the log file. Each file requested by a visitor registers as a hit. There can be several hits on each Web page. While the volume of hits reflects the amount of server traffic, it is not an accurate reflection of the number of pages viewed. Kbytes - Short for kilobytes. A kilobyte is 1024 bytes. User - A client computer identified by a unique IP address. Visit - A session of activity, including all hits, for one user of a Web or FTP site, or for one user of a category. Use this page to focus on the activity of users who accessed Core categories and logged on using a user name and password. Note that some ISPs and Web hosting services host several sites on one server. These sites are referred to as virtual sites. Virtual sites have at least two hostnames: the hostname of the virtual site and the hostname of the server computer. The hostname used for URL Categorization depends on how the firewall or proxy server records this information. If both are recorded, reports use the virtual hostname. www.netiq.com 50
  • 51. Authenticated Users Visiting Sites in Core Categories This page shows the authenticated users who most frequently visited sites within the Core categories. Authenticated Users Visiting Sites in Core Categories by Visit 2 1 0 2 4 1 3 1 2 3 4 Authenticated Users Visiting Sites in Core Categories User Site Category Hits Visits Time Kbytes RichardG www.budweiser.c Drugs, 6 1 00:00:07 32 1. om Alcohol & Tobacco www.playboy.co Adult/Sexu 10 1 00:00:02 25 m ally Explicit Total 16 2 00:00:09 57 JeremyN www.desertpalac Gambling 5 1 00:00:00 30 2. e.com PeterA www.playboy.co Adult/Sexu 16 1 00:00:11 57 3. m ally Explicit TaraM www.naawp.com Hate 11 1 00:00:08 61 4. Speech Total 48 5 00:00:28 205 Authenticated Users Visiting Sites in Core Categories - Help Card Authenticated User - A user who provided a username and password in order to log on to an FTP or Web site. Category - A group of Web sites identified in the URL Categorization database for tracking purposes, according to the type of content they represent. For example, the Gambling category may contain the addresses of Web sites for online betting. www.netiq.com 51
  • 52. Authenticated Users Visiting Sites in Core Categories - Help Card Core Category - One of several specified categories of Web sites that may contain content that is objectionable or related to illegal activity. The SurfControl database used by Security Reporting Center includes five Core categories: Sexually Explicit, Violence, Hate Speech, Gambling, and Drugs/Alcohol. Hit - A single action on the server as it appears in the log file. Each file requested by a visitor registers as a hit. There can be several hits on each Web page. While the volume of hits reflects the amount of server traffic, it is not an accurate reflection of the number of pages viewed. Kbytes - Short for kilobytes. A kilobyte is 1024 bytes. Site - A location on the World Wide Web comprising one or more related pages that are owned or managed by the same individual, company, or organization. A site may be the central access point for a group of Web pages or a group of files available for download, as with an FTP site. It is usually identified by the Web address of its central access page, the home page. User - A client computer identified by a unique IP address. Visit - A session of activity, including all hits, for one user of a Web or FTP site, or for one user of a category. Use this page to focus on the activity of users who accessed sites in Core categories and logged on using a user name and password. Note that some ISPs and Web hosting services host several sites on one server. These sites are referred to as virtual sites. Virtual sites have at least two hostnames: the hostname of the virtual site and the hostname of the server computer. The hostname used for URL Categorization depends on how the firewall or proxy server records this information. If both are recorded, reports use the virtual hostname. www.netiq.com 52
  • 53. Authenticated Users Visiting Pages in Core Categories This page shows the authenticated users who most frequently visited pages within the Core categories. Authenticated Users Visiting Pages in Core Categories by Visit 2 1 0 2 4 1 3 1 2 3 4 Authenticated Users Visiting Pages in Core Categories User Page Category Hits Visits Time Kbytes RichardG http://www.budwe Drugs, 1 1 00:00:00 26 1. iser.com/ Alcohol & Tobacco http://www.playbo Adult/Sexu 1 1 00:00:00 5 y.com/ ally Explicit Total 2 2 00:00:00 31 TaraM http://www.naawp Hate 1 1 00:00:00 3 2. .com/ Speech http://www.naawp Hate 1 1 00:00:00 9 .com/creed/index. Speech html Total 2 2 00:00:00 12 JeremyN http://www.desert Gambling 1 1 00:00:00 4 3. palace.com/ PeterA http://www.playbo Adult/Sexu 1 1 00:00:00 5 4. y.com/ ally Explicit Total 6 6 00:00:00 51 Authenticated Users Visiting Pages in Core Categories - Help Card Authenticated User - A user who provided a username and password in order to log on to an FTP or Web site. www.netiq.com 53
  • 54. Authenticated Users Visiting Pages in Core Categories - Help Card Category - A group of Web sites identified in the URL Categorization database for tracking purposes, according to the type of content they represent. For example, the Gambling category may contain the addresses of Web sites for online betting. Core Category - One of several specified categories of Web sites that may contain content that is objectionable or related to illegal activity. The SurfControl database used by Security Reporting Center includes five Core categories: Sexually Explicit, Violence, Hate Speech, Gambling, and Drugs/Alcohol. Hit - A single action on the server as it appears in the log file. Each file requested by a visitor registers as a hit. There can be several hits on each Web page. While the volume of hits reflects the amount of server traffic, it is not an accurate reflection of the number of pages viewed. Kbytes - Short for kilobytes. A kilobyte is 1024 bytes. Page - Potentially, any static or dynamic Web content defined as a page by a Security Reporting Center System Admin. Typically a page includes all static content, such as complete html pages. Dynamic Web content, which is created with variables and does not exist anywhere in a static form, may be considered as a page if the administrator wishes to include it in reports. User - A client computer identified by a unique IP address. Visit - A session of activity, including all hits, for one user of a Web or FTP site, or for one user of a category. Use this page to focus on the activity of users who accessed specific pages in the Core categories and logged on using a user name and password. www.netiq.com 54
  • 55. Top General Categories This page shows the most popular Web sites within the General categories. Top General Categories Visited over Time General over Time Computing & Internet 6 New s 5 4 Arts & Entertainment 3 2 Search Engines 1 Advertisements 0 Jan 09 Jan 11 Jan 13 Jan 15 Jan 17 Jan 19 Jan 21 Jan 08 Jan 10 Jan 12 Jan 14 Jan 16 Jan 18 Jan 20 Top General Categories Visited 30 27 24 21 18 15 12 9 6 3 0 2 4 6 8 10 12 14 16 18 1 3 5 7 9 11 13 15 17 1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 www.netiq.com 55
  • 56. Top General Categories Category Hits Visits Computing & Internet 205 32 29.35% 1. News 33 17 15.59% 2. Reference 13 13 11.92% 3. Education 12 12 11.00% 4. Hosting Sites 12 12 11.00% 5. Arts & Entertainment 55 6 5.50% 6. Search Engines 34 5 4.58% 7. Shopping 18 2 1.83% 8. Advertisements 1 1 0.91% 9. Games 11 1 0.91% 10. Glamour & Intimate Apparel 12 1 0.91% 11. Job Search & Career Development 11 1 0.91% 12. Motor Vehicles 12 1 0.91% 13. Personals & Dating 10 1 0.91% 14. Real Estate 15 1 0.91% 15. Sports 16 1 0.91% 16. Travel 11 1 0.91% 17. Usenet News 11 1 0.91% 18. Total 492 109 100.00% Top General Categories - Help Card Category - A group of Web sites identified in the URL Categorization database for tracking purposes, according to the type of content they represent. For example, the Gambling category may contain the addresses of Web sites for online betting. General Category - One of several specified categories of Web sites containing content that is not objectionable in itself, but may detract from employee productivity. The SurfControl database used by Security Reporting Center includes 15 General categories such as News, Shopping, Travel, and Chat. www.netiq.com 56
  • 57. Top General Categories - Help Card Hit - A single action on the server as it appears in the log file. Each file requested by a visitor registers as a hit. There can be several hits on each Web page. While the volume of hits reflects the amount of server traffic, it is not an accurate reflection of the number of pages viewed. Site - A location on the World Wide Web comprising one or more related pages that are owned or managed by the same individual, company, or organization. A site may be the central access point for a group of Web pages or a group of files available for download, as with an FTP site. It is usually identified by the Web address of its central access page, the home page. Visit - A session of activity, including all hits, for one user of a Web or FTP site, or for one user of a category. Use this page to see an overview of potentially sensitive Web content accessed by users in your network during the report period. Note that some ISPs and Web hosting services host several sites on one server. These sites are referred to as virtual sites. Virtual sites have at least two hostnames: the hostname of the virtual site and the hostname of the server computer. The hostname used for URL Categorization depends on how the firewall or proxy server records this information. If both are recorded, reports use the virtual hostname. www.netiq.com 57
  • 58. Top General Category Pages This page shows the most popular pages within the General categories. Top General Category Pages Visited over Time http://w w w .alphasoftw are.com/cleanpro/index.html 2 http://inet1.tek.com/Gallery/camera2/ http://ne1.new s.com/ 1 http://p5.yahoo.com/ http://p6.yahoo.com/ 0 Jan 09 Jan 11 Jan 13 Jan 15 Jan 17 Jan 19 Jan 21 Jan 08 Jan 10 Jan 12 Jan 14 Jan 16 Jan 18 Jan 20 Top General Category Pages Visited 2 1 0 2 4 6 8 10 12 14 16 18 20 1 3 5 7 9 11 13 15 17 19 1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 www.netiq.com 58
  • 59. Top General Category Pages Page Category Views Visits http://p5.yahoo.com/ Search 2 2 5.26% 1. Engines http://www.alphasoftware.com/cle Computing & 5 2 5.26% 2. anpro/index.html Internet http://www.suck.com/almanac/wx/ Arts & 3 2 5.26% 3. pdx.shtml Entertainment http://inet1.tek.com/Gallery/camer Computing & 1 1 2.63% 4. a2/ Internet http://ne1.news.com/ Computing & 1 1 2.63% 5. Internet http://p6.yahoo.com/ Search 1 1 2.63% 6. Engines http://q9.yahoo.com/quotes Search 1 1 2.63% 7. Engines http://web.zdnet.com/ Computing & 1 1 2.63% 8. Internet http://web.zdnet.com/home/filters/ Computing & 1 1 2.63% 9. maina.html Internet http://www.alphasoftware.com/ant Computing & 1 1 2.63% 10. ivirus/index.html Internet http://www.amazon.com/ Shopping 2 1 2.63% 11. http://www.amazon.com/creed/ind Shopping 2 1 2.63% 12. ex.html http://www.astrologers.com/ Arts & 1 1 2.63% 13. Entertainment http://www.century21.com/ Real Estate 1 1 2.63% 14. http://www.century21.com/creed/i Real Estate 1 1 2.63% 15. ndex.html http://www.comics.org/creed/inde Arts & 1 1 2.63% 16. x.html Entertainment http://www.deja.com/ Usenet News 1 1 2.63% 17. http://www.deja.com/creed/index. Usenet News 1 1 2.63% 18. html http://www.espn.com/ Sports 1 1 2.63% 19. http://www.espn.com/creed/index. Sports 1 1 2.63% 20. html Subtotal 29 23 60.52% Other 17 15 39.47% Total 46 38 100.00% Top General Category Pages - Help Card Category - A group of Web sites identified in the URL Categorization database for tracking purposes, according to the type of content they represent. For example, the Gambling category www.netiq.com 59
  • 60. Top General Category Pages - Help Card may contain the addresses of Web sites for online betting. General Category - One of several specified categories of Web sites containing content that is not objectionable in itself, but may detract from employee productivity. The SurfControl database used by Security Reporting Center includes 15 General categories such as News, Shopping, Travel, and Chat. Page - Potentially, any static or dynamic Web content defined as a page by a Security Reporting Center System Admin. Typically a page includes all static content, such as complete html pages. Dynamic Web content, which is created with variables and does not exist anywhere in a static form, may be considered as a page if the administrator wishes to include it in reports. View - An instance where a user accesses one Web or FTP page. Visit - A session of activity, including all hits, for one user of a Web or FTP site, or for one user of a category. Use this page to see which users most frequently visited pages in the top general categories, resulting in their inclusion in the Top General Categories ranking. This information can be used to help enforce policies for acceptable use of Internet resources. The Visits column in this table represents the number of times each user visited the listed site(s). www.netiq.com 60
  • 61. General Categories by User This page shows the top General categories accessed through the proxy server and the hostnames or IP addresses of the users who accessed them. Top General Categories Visited over Time General over Time Computing & Internet 6 New s 5 4 Arts & Entertainment 3 2 Search Engines 1 Advertisements 0 Jan 09 Jan 11 Jan 13 Jan 15 Jan 17 Jan 19 Jan 21 Jan 08 Jan 10 Jan 12 Jan 14 Jan 16 Jan 18 Jan 20 Top General Categories Visited 13 12 11 10 9 8 7 6 5 4 3 2 1 0 2 4 6 8 10 12 14 16 18 20 1 3 5 7 9 11 13 15 17 19 1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 www.netiq.com 61
  • 62. General Categories by User Category User Hits Visits Avg. Time Kbytes Computing & jasong.internal.webtrends.com 159 12 00:16:06 1,082 1. Internet 192.168.99.28 6 6 00:00:00 854 WEBTRENDS-NT 6 6 00:00:00 429 192.168.99.278 4 4 00:00:00 570 andreag.internal.webtrends.co 28 2 00:01:20 114 m richardg.internal.webtrends.co 2 2 00:00:00 157 m Total 205 32 00:17:26 3,205 News 192.168.99.212 12 12 00:00:00 1,709 2. andreag.internal.webtrends.co 19 3 00:00:37 118 m jasong.internal.webtrends.com 2 1 00:00:01 17 Total 33 16 00:00:38 1,843 Reference 192.168.99.25 6 6 00:00:00 854 3. 192.168.99.245 4 4 00:00:00 570 richardg.internal.webtrends.co 2 2 00:00:00 157 m WEBTRENDS-NT 1 1 00:00:00 71 Total 13 13 00:00:00 1,652 Education 192.168.99.202 12 12 00:00:00 1,453 4. Hosting Sites 192.168.99.29 6 6 00:00:00 2,133 5. 192.168.99.269 4 4 00:00:00 570 richardg.internal.webtrends.co 2 2 00:00:00 157 m Total 12 12 00:00:00 2,860 Arts & jasong.internal.webtrends.com 23 3 00:02:56 133 6. Entertainment WEBTRENDS-NT 2 2 00:00:00 15 philm.internal.webtrends.com 20 1 00:01:01 71 taram.internal.webtrends.com 10 1 00:30:08 58 Total 55 7 00:34:05 277 Search andreag.internal.webtrends.co 24 2 00:00:06 78 7. Engines m Jason 1 1 00:00:00 7 jasong.internal.webtrends.com 9 1 00:00:09 53 Total 34 4 00:00:15 139 Job Search & jasong.internal.webtrends.com 11 2 00:00:09 61 8. Career Development Shopping andreag.internal.webtrends.co 18 2 00:10:07 91 9. m Usenet News jasong.internal.webtrends.com 11 2 00:00:09 61 www.netiq.com 62
  • 63. General Categories by User Category User Hits Visits Avg. Time Kbytes 10. Advertisement andreag.internal.webtrends.co 1 1 00:00:00 2 11. s m Games taram.internal.webtrends.com 11 1 00:10:00 61 12. Glamour & taram.internal.webtrends.com 12 1 00:20:00 64 13. Intimate Apparel Motor taram.internal.webtrends.com 12 1 00:20:00 64 14. Vehicles Personals & taram.internal.webtrends.com 10 1 00:30:08 58 15. Dating Real Estate johnx.internal.webtrends.com 15 1 00:02:01 101 16. Sports philm.internal.webtrends.com 16 1 00:50:00 93 17. Travel taram.internal.webtrends.com 11 1 00:10:00 61 18. Total 492 110 03:24:58 12,144 General Categories by User - Help Card Category - A group of Web sites identified in the URL Categorization database for tracking purposes, according to the type of content they represent. For example, the Gambling category may contain the addresses of Web sites for online betting. General Category - One of several specified categories of Web sites containing content that is not objectionable in itself, but may detract from employee productivity. The SurfControl database used by Security Reporting Center includes 15 General categories such as News, Shopping, Travel, and Chat. Hit - A single action on the server as it appears in the log file. Each file requested by a visitor registers as a hit. There can be several hits on each Web page. While the volume of hits reflects the amount of server traffic, it is not an accurate reflection of the number of pages viewed. Kbytes - Short for kilobytes. A kilobyte is 1024 bytes. User - A client computer identified by a unique IP address. Visit - A session of activity, including all hits, for one user of a Web or FTP site, or for one user of a category. www.netiq.com 63
  • 64. General Categories by User - Help Card Use this page to see which users most frequently visited the sites in the top General categories, resulting in their inclusion in the Top General Categories ranking. This information can be used to help enforce policies for acceptable use of Internet resources. The Visits column in this table represents the number of times each user visited the listed site(s). Note that some ISPs and Web hosting services host several sites on one server. These sites are referred to as virtual sites. Virtual sites have at least two hostnames: the hostname of the virtual site and the hostname of the server computer. The hostname used for URL Categorization depends on how the firewall or proxy server records this information. If both are recorded, reports use the virtual hostname. www.netiq.com 64
  • 65. Users Visiting General Categories This page shows the users who connected to the proxy server and the General categories they visited the most frequently during the report period. Users Visiting General Categories by Visits 20 18 16 14 12 10 8 6 4 2 0 2 4 6 8 10 12 14 16 1 3 5 7 9 11 13 15 1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 Users Visiting General Categories User Category Hits Visits Time Kbytes Cost jasong.internal.webtren Computing 159 12 00:16:06 1,082 $5.84 1. ds.com & Internet Arts & 23 3 00:02:56 133 $0.71 Entertainm ent Job 11 2 00:00:09 61 $0.32 Search & Career Developm ent Usenet 11 2 00:00:09 61 $0.32 News News 2 1 00:00:01 17 $0.09 Search 9 1 00:00:09 53 $0.28 Engines www.netiq.com 65
  • 66. Users Visiting General Categories User Category Hits Visits Time Kbytes Cost Total 21 00:19:30 1,407 $7.59 192.168.99.202 Education 12 12 00:00:00 1,453 $7.84 2. 192.168.99.212 News 12 12 00:00:00 1,709 $9.22 3. andreag.internal.webtre News 19 3 00:00:37 118 $0.63 4. nds.com Computing 28 2 00:01:20 114 $0.61 & Internet Search 24 2 00:00:06 78 $0.42 Engines Shopping 18 2 00:10:07 91 $0.49 Advertisem 1 1 00:00:00 2 $0.01 ents Total 10 00:12:10 402 $2.17 WEBTRENDS-NT Computing 6 6 00:00:00 429 $2.31 5. & Internet Arts & 2 2 00:00:00 15 $0.08 Entertainm ent Reference 1 1 00:00:00 71 $0.38 Total 9 00:00:00 515 $2.78 192.168.99.25 Reference 6 6 00:00:00 854 $4.61 6. 192.168.99.28 Computing 6 6 00:00:00 854 $4.61 7. & Internet 192.168.99.29 Hosting 6 6 00:00:00 2,133 $11.51 8. Sites richardg.internal.webtre Computing 2 2 00:00:00 157 $0.84 9. nds.com & Internet Hosting 2 2 00:00:00 157 $0.84 Sites Reference 2 2 00:00:00 157 $0.84 Total 6 00:00:00 471 $2.54 taram.internal.webtrend Arts & 10 1 00:30:08 58 $0.31 10. s.com Entertainm ent Games 11 1 00:10:00 61 $0.32 Glamour & 12 1 00:20:00 64 $0.34 Intimate Apparel Motor 12 1 00:20:00 64 $0.34 Vehicles Personals 10 1 00:30:08 58 $0.31 & Dating Travel 11 1 00:10:00 61 $0.32 Total 6 02:00:16 366 $1.97 192.168.99.245 Reference 4 4 00:00:00 570 $3.07 www.netiq.com 66
  • 67. Users Visiting General Categories User Category Hits Visits Time Kbytes Cost 11. 192.168.99.269 Hosting 4 4 00:00:00 570 $3.07 12. Sites 192.168.99.278 Computing 4 4 00:00:00 570 $3.07 13. & Internet philm.internal.webtrend Arts & 20 1 00:01:01 71 $0.38 14. s.com Entertainm ent Sports 16 1 00:50:00 93 $0.50 Total 2 00:51:01 164 $0.88 Jason Search 1 1 00:00:00 7 $0.03 15. Engines johnx.internal.webtrend Real 15 1 00:02:01 101 $0.54 16. s.com Estate Other 382 -3:-23:-8 152 $12,078. 50 Total 492 00:01:50 12,298 $12,144. 00 Users Visiting General Categories - Help Card Category - A group of Web sites identified in the URL Categorization database for tracking purposes, according to the type of content they represent. For example, the Gambling category may contain the addresses of Web sites for online betting. General Category - One of several specified categories of Web sites containing content that is not objectionable in itself, but may detract from employee productivity. The SurfControl database used by Security Reporting Center includes 15 General categories such as News, Shopping, Travel, and Chat. Hit - A single action on the server as it appears in the log file. Each file requested by a visitor registers as a hit. There can be several hits on each Web page. While the volume of hits reflects the amount of server traffic, it is not an accurate reflection of the number of pages viewed. Kbytes - Short for kilobytes. A kilobyte is 1024 bytes. User - A client computer identified by a unique IP address. Visit - A session of activity, including all hits, for one user of a Web or FTP site, or for one user of a category. Use this page to focus on the most active visitors to General catgories and determine how much time and bandwidth they expended during their visits. Note that some ISPs and Web hosting services host several sites on one server. These sites are referred to as virtual sites. Virtual sites have at least two hostnames: the hostname of the virtual site and the hostname of the server computer. The hostname used for URL Categorization depends on how the firewall or proxy server records this information. If both are recorded, reports use the virtual hostname. www.netiq.com 67
  • 68. Users Visiting General Categories - Help Card www.netiq.com 68
  • 69. Users Visiting Sites in General Categories This page shows the users who most frequently visited sites within the General categories during the report period. Users Visiting Sites in General Categories by Visits Sites in General 24 22 20 18 16 14 12 10 8 6 4 2 0 2 4 6 8 10 12 14 16 1 3 5 7 9 11 13 15 1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 Users Visiting Sites in General Categories User Site Hits Visits Time Kbytes jasong.internal.webtre www.alphasoftware.co 158 12 00:15:57 1,082 1. nds.com m www.astrologers.com 13 2 00:02:02 98 www.deja.com 11 2 00:00:09 61 www.monsterboard.co 11 2 00:00:09 61 m inet1.tek.com 1 1 00:00:00 1 p6.yahoo.com 1 1 00:00:00 26 q9.yahoo.com 1 1 00:00:00 12 us.yimg.com 1 1 00:00:00 1 www.prnewswire.com 2 1 00:00:01 17 www.suck.com 10 1 00:01:03 35 www6.yahoo.com 6 1 00:00:08 14 Total 215 25 00:19:29 1,407 andreag.internal.webtr www7.cnn.com 19 3 00:00:37 118 www.netiq.com 69
  • 70. Users Visiting Sites in General Categories User Site Hits Visits Time Kbytes 2. ends.com p5.yahoo.com 2 2 00:00:00 52 us.yimg.com 10 2 00:00:02 11 web.zdnet.com 21 2 00:00:02 56 www7.yahoo.com 12 2 00:00:06 15 ads1.zdnet.com 1 1 00:00:00 2 e7.zdnet.com 1 1 00:00:00 11 ne1.news.com 6 1 00:01:18 47 www.amazon.com 17 1 00:10:07 90 www1.zdnet.com 1 1 00:00:00 1 Total 90 16 00:12:12 402 192.168.99.202 www.test.com 12 12 00:00:00 1,453 3. 192.168.99.212 www.abc.com 12 12 00:00:00 1,709 4. WEBTRENDS-NT www.egsoftware.com 6 6 00:00:00 429 5. www.other.com 2 2 00:00:00 15 www.unknown.com 1 1 00:00:00 71 Total 9 9 00:00:00 515 192.168.99.25 www.unknown.com 6 6 00:00:00 854 6. 192.168.99.28 www.hello.com 6 6 00:00:00 854 7. 192.168.99.29 www.domain.com 6 6 00:00:00 2,133 8. richardg.internal.webtr www.domain.com 2 2 00:00:00 157 9. ends.com www.hello.com 2 2 00:00:00 157 www.unknown.com 2 2 00:00:00 157 Total 6 6 00:00:00 471 taram.internal.webtren www.comics.org 10 1 00:30:08 58 10. ds.com www.gamecenter.com 11 1 00:10:00 61 www.match.com 10 1 00:30:08 58 www.ual.com 11 1 00:10:00 61 www.victoriassecret.c 12 1 00:20:00 64 om www.vintage- 12 1 00:20:00 64 mustang.com Total 66 6 02:00:16 366 192.168.99.245 www.unknown.com 4 4 00:00:00 570 11. 192.168.99.269 www.domain.com 4 4 00:00:00 570 12. 192.168.99.278 www.hello.com 4 4 00:00:00 570 13. philm.internal.webtren www.espn.com 16 1 00:50:00 93 www.netiq.com 70
  • 71. Users Visiting Sites in General Categories User Site Hits Visits Time Kbytes 14. ds.com www.suck.com 20 1 00:01:01 71 Total 36 2 00:51:01 164 Jason www.yahoo.com 1 1 00:00:00 7 15. johnx.internal.webtren www.century21.com 15 1 00:02:01 101 16. ds.com Total 492 120 03:24:59 12,144 Users Visiting Sites in General Categories - Help Card Category - A group of Web sites identified in the URL Categorization database for tracking purposes, according to the type of content they represent. For example, the Gambling category may contain the addresses of Web sites for online betting. General Category - One of several specified categories of Web sites containing content that is not objectionable in itself, but may detract from employee productivity. The SurfControl database used by Security Reporting Center includes 15 General categories such as News, Shopping, Travel, and Chat. Hit - A single action on the server as it appears in the log file. Each file requested by a visitor registers as a hit. There can be several hits on each Web page. While the volume of hits reflects the amount of server traffic, it is not an accurate reflection of the number of pages viewed. Kbytes - Short for kilobytes. A kilobyte is 1024 bytes. Site - A location on the World Wide Web comprising one or more related pages that are owned or managed by the same individual, company, or organization. A site may be the central access point for a group of Web pages or a group of files available for download, as with an FTP site. It is usually identified by the Web address of its central access page, the home page. User - A client computer identified by a unique IP address. Visit - A session of activity, including all hits, for one user of a Web or FTP site, or for one user of a category. Use this page to see what General category sites each of the top users visited most frequently and how much time and bandwidth they expended while visiting those sites. Note that some ISPs and Web hosting services host several sites on one server. These sites are referred to as virtual sites. Virtual sites have at least two hostnames: the hostname of the virtual site and the hostname of the server computer. The hostname used for URL Categorization depends on how the firewall or proxy server records this information. If both are recorded, reports use the virtual hostname. www.netiq.com 71
  • 72. General Category Visits by Authenticated Users This page shows the most popular General categories accessed through the proxy server and the authenticated users who accessed them. General Category Visits by Authenticated Users by Visits 4 3 2 1 0 2 4 6 8 10 12 14 16 1 3 5 7 9 11 13 15 1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 General Category Visits by Authenticated Users Category User Hits Visits Time Kbytes Computing AndreaG 28 2 00:01:20 114 1. & Internet RichardG 2 2 00:00:00 157 Total 30 4 00:01:20 271 News AndreaG 19 3 00:00:37 118 2. Arts & PhilM 20 1 00:01:01 71 3. Entertainme nt TaraM 10 1 00:30:08 58 Total 30 2 00:31:09 129 Hosting RichardG 2 2 00:00:00 157 4. Sites Reference RichardG 2 2 00:00:00 157 5. www.netiq.com 72
  • 73. General Category Visits by Authenticated Users Category User Hits Visits Time Kbytes Search AndreaG 24 2 00:00:06 78 6. Engines Shopping AndreaG 18 2 00:10:07 91 7. Advertisem AndreaG 1 1 00:00:00 2 8. ents Games TaraM 11 1 00:10:00 61 9. Glamour & TaraM 12 1 00:20:00 64 10. Intimate Apparel Motor TaraM 12 1 00:20:00 64 11. Vehicles Personals & TaraM 10 1 00:30:08 58 12. Dating Real Estate JohnX 15 1 00:02:01 101 13. Sports PhilM 16 1 00:50:00 93 14. Travel TaraM 11 1 00:10:00 61 15. Usenet JasonG 8 1 00:00:08 46 16. News Total 221 26 03:05:36 1,550 General Category Visits by Authenticated Users - Help Card Authenticated User - A user who provided a username and password in order to log on to an FTP or Web site. Category - A group of Web sites identified in the URL Categorization database for tracking purposes, according to the type of content they represent. For example, the Gambling category may contain the addresses of Web sites for online betting. General Category - One of several specified categories of Web sites containing content that is not objectionable in itself, but may detract from employee productivity. The SurfControl database used by Security Reporting Center includes 15 General categories such as News, Shopping, Travel, and Chat. Hit - A single action on the server as it appears in the log file. Each file requested by a visitor registers as a hit. There can be several hits on each Web page. While the volume of hits reflects the amount of server traffic, it is not an accurate reflection of the number of pages viewed. Kbytes - Short for kilobytes. A kilobyte is 1024 bytes. User - A client computer identified by a unique IP address. Visit - A session of activity, including all hits, for one user of a Web or FTP site, or for one user www.netiq.com 73
  • 74. General Category Visits by Authenticated Users - Help Card of a category. Use this page to find out what General categories were visited by users who provided a user name and password in order to log on. Note that some ISPs and Web hosting services host several sites on one server. These sites are referred to as virtual sites. Virtual sites have at least two hostnames: the hostname of the virtual site and the hostname of the server computer. The hostname used for URL Categorization depends on how the firewall or proxy server records this information. If both are recorded, reports use the virtual hostname. www.netiq.com 74
  • 75. Authenticated Users Visiting General Categories This page shows the most active authenticated users and the General categories they visited the most frequently during the report period. Authenticated Users Visiting General Categories by Visits 10 9 8 7 6 5 4 3 2 1 0 2 4 6 1 3 5 1 2 3 4 5 6 Authenticated Users Visiting General Categories User Category Hits Visits Time Kbytes AndreaG News 19 3 00:00:37 118 1. Computing 28 2 00:01:20 114 & Internet Search 24 2 00:00:06 78 Engines Shopping 18 2 00:10:07 91 Advertisem 1 1 00:00:00 2 ents Total 90 10 00:12:10 402 RichardG Computing 2 2 00:00:00 157 2. & Internet Hosting 2 2 00:00:00 157 Sites Reference 2 2 00:00:00 157 www.netiq.com 75
  • 76. Authenticated Users Visiting General Categories User Category Hits Visits Time Kbytes Total 6 6 00:00:00 471 TaraM Arts & 10 1 00:30:08 58 3. Entertainme nt Games 11 1 00:10:00 61 Glamour & 12 1 00:20:00 64 Intimate Apparel Motor 12 1 00:20:00 64 Vehicles Personals & 10 1 00:30:08 58 Dating Travel 11 1 00:10:00 61 Total 66 6 02:00:16 366 PhilM Arts & 20 1 00:01:01 71 4. Entertainme nt Sports 16 1 00:50:00 93 Total 36 2 00:51:01 164 JasonG Usenet 8 1 00:00:08 46 5. News JohnX Real Estate 15 1 00:02:01 101 6. Total 221 26 03:05:36 1,550 Authenticated Users Visiting General Categories - Help Card Authenticated User - A user who provided a username and password in order to log on to an FTP or Web site. Category - A group of Web sites identified in the URL Categorization database for tracking purposes, according to the type of content they represent. For example, the Gambling category may contain the addresses of Web sites for online betting. General Category - One of several specified categories of Web sites containing content that is not objectionable in itself, but may detract from employee productivity. The SurfControl database used by Security Reporting Center includes 15 General categories such as News, Shopping, Travel, and Chat. Hit - A single action on the server as it appears in the log file. Each file requested by a visitor registers as a hit. There can be several hits on each Web page. While the volume of hits reflects the amount of server traffic, it is not an accurate reflection of the number of pages viewed. Kbytes - Short for kilobytes. A kilobyte is 1024 bytes. User - A client computer identified by a unique IP address. Visit - A session of activity, including all hits, for one user of a Web or FTP site, or for one user www.netiq.com 76
  • 77. Authenticated Users Visiting General Categories - Help Card of a category. Use this page to focus on the activity of users who accessed General categories and logged on using a user name and password. Note that some ISPs and Web hosting services host several sites on one server. These sites are referred to as virtual sites. Virtual sites have at least two hostnames: the hostname of the virtual site and the hostname of the server computer. The hostname used for URL Categorization depends on how the firewall or proxy server records this information. If both are recorded, reports use the virtual hostname. www.netiq.com 77
  • 78. Authenticated Users Visiting Sites in General Categories This page shows the authenticated users who most frequently visited sites within the General categories during the report period. Authenticated Users Visiting Sites in General Categories by Visit 16 14 12 10 8 6 4 2 0 2 4 6 1 3 5 1 2 3 4 5 6 Authenticated Users Visiting Sites in General Categories User Site Hits Visits Time Kbytes AndreaG www7.cnn.com 19 3 00:00:37 118 1. p5.yahoo.com 2 2 00:00:00 52 us.yimg.com 10 2 00:00:02 11 web.zdnet.com 21 2 00:00:02 56 www7.yahoo.com 12 2 00:00:06 15 ads1.zdnet.com 1 1 00:00:00 2 e7.zdnet.com 1 1 00:00:00 11 ne1.news.com 6 1 00:01:18 47 www.amazon.com 17 1 00:10:07 90 www1.zdnet.com 1 1 00:00:00 1 Total 90 16 00:12:12 402 RichardG www.domain.com 2 2 00:00:00 157 2. www.hello.com 2 2 00:00:00 157 www.netiq.com 78
  • 79. Authenticated Users Visiting Sites in General Categories User Site Hits Visits Time Kbytes www.unknown.com 2 2 00:00:00 157 Total 6 6 00:00:00 471 TaraM www.comics.org 10 1 00:30:08 58 3. www.gamecenter.com 11 1 00:10:00 61 www.match.com 10 1 00:30:08 58 www.ual.com 11 1 00:10:00 61 www.victoriassecret.com 12 1 00:20:00 64 www.vintage-mustang.com 12 1 00:20:00 64 Total 66 6 02:00:16 366 PhilM www.espn.com 16 1 00:50:00 93 4. www.suck.com 20 1 00:01:01 71 Total 36 2 00:51:01 164 JasonG www.deja.com 8 1 00:00:08 46 5. JohnX www.century21.com 15 1 00:02:01 101 6. Total 221 32 03:05:38 1,550 Authenticated Users Visiting Sites in General Categories - Help Card Authenticated User - A user who provided a username and password in order to log on to an FTP or Web site. Category - A group of Web sites identified in the URL Categorization database for tracking purposes, according to the type of content they represent. For example, the Gambling category may contain the addresses of Web sites for online betting. General Category - One of several specified categories of Web sites containing content that is not objectionable in itself, but may detract from employee productivity. The SurfControl database used by Security Reporting Center includes 15 General categories such as News, Shopping, Travel, and Chat. Hit - A single action on the server as it appears in the log file. Each file requested by a visitor registers as a hit. There can be several hits on each Web page. While the volume of hits reflects the amount of server traffic, it is not an accurate reflection of the number of pages viewed. Kbytes - Short for kilobytes. A kilobyte is 1024 bytes. Site - A location on the World Wide Web comprising one or more related pages that are owned or managed by the same individual, company, or organization. A site may be the central access point for a group of Web pages or a group of files available for download, as with an FTP site. It is usually identified by the Web address of its central access page, the home page. User - A client computer identified by a unique IP address. Visit - A session of activity, including all hits, for one user of a Web or FTP site, or for one user www.netiq.com 79
  • 80. Authenticated Users Visiting Sites in General Categories - Help Card of a category. Use this page to focus on the activity of users who accessed sites in Core categories and logged on using a user name and password. Note that some ISPs and Web hosting services host several sites on one server. These sites are referred to as virtual sites. Virtual sites have at least two hostnames: the hostname of the virtual site and the hostname of the server computer. The hostname used for URL Categorization depends on how the firewall or proxy server records this information. If both are recorded, reports use the virtual hostname. www.netiq.com 80
  • 81. Top-Level Domain Types This page breaks down Web and FTP activity by the top-level domains visited. Top-Level Domain Types by Visits over Time Commercial 12 10 8 6 Organization 4 2 0 Jan 09 Jan 11 Jan 13 Jan 15 Jan 17 Jan 19 Jan 21 Jan 08 Jan 10 Jan 12 Jan 14 Jan 16 Jan 18 Jan 20 Top-Level Domain Types By Visits 100 80 60 40 20 0 2 1 1 2 Top-Level Domain Types Top-Level Domain Type Hits Visits Commercial 559 98 98.99% 1. Organization 10 1 1.01% 2. Total 569 99 100.00% www.netiq.com 81
  • 82. Top-Level Domain Types - Help Card Hit - A single action on the server as it appears in the log file. Each file requested by a visitor registers as a hit. There can be several hits on each Web page. While the volume of hits reflects the amount of server traffic, it is not an accurate reflection of the number of pages viewed. Top-Level Domain - One of a limited number of domain types identified by a suffix such as .gov, .org, or .com. The list of types included in reports is defined by a Security Reporting Center System Admin using the Domains panel. Visit - A session of activity, including all hits, for one user of a Web or FTP site, or for one user of a category. Use this page to see which top-level domains, such as commercial (.com) or government (.gov), your users visited most frequently. These top-level domains may include a variety of file extensions and can be specified by a Security Reporting Center System Admin. www.netiq.com 82
  • 83. Top Countries This page identifies the countries most frequently accessed through the proxy server. Top Countries by Visits over Time 12 10 8 6 4 2 0 Jan 09 Jan 11 Jan 13 Jan 15 Jan 17 Jan 19 Jan 21 Jan 08 Jan 10 Jan 12 Jan 14 Jan 16 Jan 18 Jan 20 Top Countries By Visits 80 40 0 1 1 Country Breakdown Country Visits United States (US) 98 100.00% 1. Total 98 100.00% Top Countries - Help Card www.netiq.com 83
  • 84. Top Countries - Help Card Visit - A session of activity, including all hits, for one user of a Web or FTP site, or for one user of a category. Use this page to see a breakdown of the countries associated with the sites your users access. The country is determined by the Web site's domain name suffix. The registered address for a domain name often differs from the physical location of the site developer. This is frequently the case with large multi-national organizations, or with sites hosted by an ISP. www.netiq.com 84
  • 85. Activity Summary This page gives an overview of proxy server activity, comparing the level of activity on weekdays and weekends. Activity Summary Average Number of Users per Day on Weekdays 7 Average Number of Hits per Day on Weekdays 46 Average Number of Users per Weekend 15 Average Number of Hits per Weekend 62 Most Active Day of the Week Tuesday Least Active Day of the Week Monday Most Active Date Tuesday, January 08, 2002 Number of Hits on Most Active Day 154 Least Active Date Monday, January 21, 2002 Number of Hits on Least Active Day 17 Activity Summary - Help Card Day - The day of the week. If the report period is longer than one week, and there are, for example, two Mondays, the value shown for Monday includes the combined total of both Mondays. Hit - A single action on the server as it appears in the log file. Each file requested by a visitor registers as a hit. There can be several hits on each Web page. While the volume of hits reflects the amount of server traffic, it is not an accurate reflection of the number of pages viewed. Server - A computer that provides resources and services for other (client) computers that connect to it. A server can be accessed via a network or intranet, or via the Internet. User - A client computer identified by a unique IP address. Use this page to track issues related to productivity and network traffic planning. For example, determining when the proxy server is busiest may help you decide when to schedule server downtime. Average Number of Users and Hits on Weekdays shows the averages for weekdays. Average Number of Users and Hits for Weekends groups Saturday and Sunday together. www.netiq.com 85
  • 86. Kbytes over Time This page shows how much bandwidth was consumed by incoming and outgoing requests through the proxy server during the report period and provides an overview of your site's activity. Kbytes over Time 2,000 1,800 1,600 1,400 1,200 1,000 800 600 400 200 0 Jan 09 Jan 11 Jan 13 Jan 15 Jan 17 Jan 19 Jan 21 Jan 08 Jan 10 Jan 12 Jan 14 Jan 16 Jan 18 Jan 20 Kbytes over Time Time Interval Kbytes January 8 1,136 7.20% January 9 528 3.35% January 10 809 5.13% January 11 1,553 9.85% January 12 1,466 9.30% January 13 908 5.76% January 14 1,437 9.12% January 15 1,054 6.68% January 16 1,778 11.28% January 17 810 5.14% January 18 810 5.14% January 19 1,396 8.86% January 20 2,013 12.77% January 21 59 0.37% Total 15,757 100.00% Kbytes over Time - Help Card Bandwidth - A measure in kilobytes of the amount of data transmitted or received. Day - The day of the week. If the report period is longer than one week, and there are, for example, two Mondays, the value shown for Monday includes the combined total of both www.netiq.com 86
  • 87. Kbytes over Time - Help Card Mondays. Hour - The hour of the day. If the report period is longer than one day, the value shown for a given hour includes the combined total during that hour for all days in the report period. Kbytes - Short for kilobytes. A kilobyte is 1024 bytes. Depending on the time interval selected in the current report, this page shows bandwidth in kbytes consumed during each unit of time. www.netiq.com 87
  • 88. Activity by Day of the Week This page shows the activity for each day of the week during the report period. Visits By Day of Week 22 20 18 16 14 12 10 8 6 4 2 0 Monday Wednesday Friday Sunday Tuesday Thursday Saturday Activity by Day of the Week Day Hits Visits Monday 38 10 12.65% Tuesday 216 22 27.84% Wednesday 108 15 18.98% Thursday 52 14 17.72% Friday 52 18 22.78% Total Weekdays 466 79 100.00% Saturday 50 16 53.33% Sunday 74 14 46.66% Total Weekend 124 30 100.00% Activity by Day of the Week - Help Card Day - The day of the week. If the report period is longer than one week, and there are, for example, two Mondays, the value shown for Monday includes the combined total of both Mondays. Hit - A single action on the server as it appears in the log file. Each file requested by a visitor registers as a hit. There can be several hits on each Web page. While the volume of hits reflects the amount of server traffic, it is not an accurate reflection of the number of pages viewed. Visit - A session of activity, including all hits, for one user of a Web or FTP site, or for one user of a category. www.netiq.com 88
  • 89. Activity by Day of the Week - Help Card Use this page to see how many hits and visits were logged on each day of the week, including Saturday and Sunday. www.netiq.com 89
  • 90. Activity by Hour of the Day This page shows the most and the least active hour of the day based on visits. Visits By Hour of Day 11 10 9 8 7 6 5 4 3 2 1 0 2 4 6 8 10 12 14 16 18 20 22 24 1 3 5 7 9 11 13 15 17 19 21 23 Activity by Hour of the Day Hour Hits Visits 08:00-08:59 10 10 13.88% 09:00-09:59 1 1 1.38% 10:00-10:59 78 10 13.88% 11:00-11:59 58 11 15.27% 12:00-12:59 5 5 6.94% 13:00-13:59 12 8 11.11% 14:00-14:59 11 10 13.88% 15:00-15:59 73 11 15.27% 16:00-16:59 125 6 8.33% Totals for Work Hours (8:00am-5:00pm) 373 72 100.00% 17:00-17:59 109 7 18.91% 18:00-18:59 51 11 29.73% 19:00-19:59 3 3 8.10% 20:00-20:59 0 0 0.00% 21:00-21:59 0 0 0.00% 22:00-22:59 0 0 0.00% 23:00-23:59 0 0 0.00% 00:00-00:59 0 0 0.00% 01:00-01:59 1 1 2.70% 02:00-02:59 0 0 0.00% 03:00-03:59 0 0 0.00% 04:00-04:59 1 1 2.70% 05:00-05:59 6 6 16.21% 06:00-06:59 6 4 10.81% www.netiq.com 90
  • 91. Activity by Hour of the Day Hour Hits Visits 07:00-07:59 40 4 10.81% Totals for After Hours (5:01pm-7:59am) 217 37 100.00% Activity by Hour of the Day Summary (Visits) Most Active Hour of the Day 18:00-18:59 Least Active Hour of the Day 00:00-00:59 Activity by Hour of the Day - Help Card Hit - A single action on the server as it appears in the log file. Each file requested by a visitor registers as a hit. There can be several hits on each Web page. While the volume of hits reflects the amount of server traffic, it is not an accurate reflection of the number of pages viewed. Hour - The hour of the day. If the report period is longer than one day, the value shown for a given hour includes the combined total during that hour for all days in the report period. Visit - A session of activity, including all hits, for one user of a Web or FTP site, or for one user of a category. Work Hours - The hours during the working day, as defined by a Security Reporting Center System Admin. Use this page to determine the distribution of hits and visits around the clock during the report period. www.netiq.com 91
  • 92. Proxy Cache This page shows performance data for the proxy server cache. Proxy Cache by Hits over Time 160 140 120 100 80 60 40 20 0 Jan 09 Jan 11 Jan 13 Jan 15 Jan 17 Jan 19 Jan 21 Jan 08 Jan 10 Jan 12 Jan 14 Jan 16 Jan 18 Jan 20 Proxy Cache by Hits 600 400 200 0 1 1 Proxy Cache Status Hits Kbytes From the Internet 590 100.00% 15,755 1. Total 590 100.00% 15,755 Proxy Cache - Help Card www.netiq.com 92
  • 93. Proxy Cache - Help Card Hit - A single action on the server as it appears in the log file. Each file requested by a visitor registers as a hit. There can be several hits on each Web page. While the volume of hits reflects the amount of server traffic, it is not an accurate reflection of the number of pages viewed. Kbytes - Short for kilobytes. A kilobyte is 1024 bytes. Proxy Server - A firewall or other device that intercepts, tracks, manages, and responds to requests to application servers from client computers in a network. For example, a proxy server may forward a user's request for a Web page to a Web server. Use this page to track cache performance by determining the proportion of hits that returned each status type. www.netiq.com 93
  • 94. Proxy Cache Details This page shows detailed performance data for the proxy server cache. Proxy Cache Details by Hits 600 400 200 0 1 1 Proxy Cache Details Status Hits Kbytes Detailed status not available 590 100.00% 15,755 1. Total 590 100.00% 15,755 Proxy Cache Details - Help Card Hit - A single action on the server as it appears in the log file. Each file requested by a visitor registers as a hit. There can be several hits on each Web page. While the volume of hits reflects the amount of server traffic, it is not an accurate reflection of the number of pages viewed. Kbytes - Short for kilobytes. A kilobyte is 1024 bytes. Proxy Server - A firewall or other device that intercepts, tracks, manages, and responds to requests to application servers from client computers in a network. For example, a proxy server may forward a user's request for a Web page to a Web server. Use this page to track cache performance in detail by determining the proportion of hits that returned each status type. www.netiq.com 94
  • 95. Client Errors This page identifies the type of errors returned by clients that accessed the proxy server. Client Errors by Hits 2 1 0 1 1 Client Errors Error Hits 404 Page or File Not Found 1 100.00% 1. Total 1 100.00% Client Errors - Help Card Client - A computer or user that requests access to resources provided by another computer, called a server. The information in the Client column can be an IP address, a domain name, a user name, or an authenticated user name. Error - A problem encountered by a client computer when trying to access resources on the World Wide Web. Hit - A single action on the server as it appears in the log file. Each file requested by a visitor registers as a hit. There can be several hits on each Web page. While the volume of hits reflects the amount of server traffic, it is not an accurate reflection of the number of pages viewed. When a client accesses the proxy server, the server sometimes returns errors that it classifies as client errors. This information can be useful when troubleshooting problems your users encounter when they access sites outside the firewall. It can also help your partners track down problems with their Web sites. www.netiq.com 95
  • 96. Top Browsers This page shows the most popular Web browsers used when connecting to your proxy server. Top Browsers by Visits over Time 14 12 10 8 6 4 2 0 Jan 09 Jan 11 Jan 13 Jan 15 Jan 17 Jan 19 Jan 21 Jan 08 Jan 10 Jan 12 Jan 14 Jan 16 Jan 18 Jan 20 Top Browsers by Visits 80 40 0 1 1 Top Browsers Browser Hits Visits Others 590 109 100.00% 1. Total 590 109 100.00% Top Browsers - Help Card www.netiq.com 96
  • 97. Top Browsers - Help Card Browser - A program used to locate and view HTML documents, for example Microsoft Internet Explorer or Netscape Navigator. Hit - A single action on the server as it appears in the log file. Each file requested by a visitor registers as a hit. There can be several hits on each Web page. While the volume of hits reflects the amount of server traffic, it is not an accurate reflection of the number of pages viewed. Proxy Server - A firewall or other device that intercepts, tracks, manages, and responds to requests to application servers from client computers in a network. For example, a proxy server may forward a user's request for a Web page to a Web server. Visit - A session of activity, including all hits, for one user of a Web or FTP site, or for one user of a category. Tracking browser types can help ensure that users on your internal network are using licensed Web browsers in the latest version. If the report shows the browser type "Others," your firewall or proxy server does not log information about browser type. www.netiq.com 97
  • 98. Top Search Engines This page shows which search engines were accessed most frequently through the proxy server. Top Search Engines by Searches 2 1 0 1 1 Top Search Engines Engines Searches Yahoo 1 100.00% 1. Total 1 100.00% Top Search Engines - Help Card Proxy Server - A firewall or other device that intercepts, tracks, manages, and responds to requests to application servers from client computers in a network. For example, a proxy server may forward a user's request for a Web page to a Web server. Search Engine - A program such as Yahoo or Google that searches the World Wide Web and locates sites and pages by subject, keyword, or any other search criteria. Use this page to see which search engines are most popular with users in your network. www.netiq.com 98
  • 99. Top Search Keywords This page shows which keywords were used when accessing search engines. Top Search Keywords by Searches 2 1 0 1 1 Top Search Keywords Keywords Searches sex 1 100.00% 1. Total 1 100.00% Top Search Keywords - Help Card Search Engine - A program such as Yahoo or Google that searches the World Wide Web and locates sites and pages by subject, keyword, or any other search criteria. Tracking the search keywords implemented by users in your netork gives insight into the type of content they searched for. www.netiq.com 99
  • 100. Top Platforms This page shows the operating systems most used by the visitors to your server. Top Platforms by Visits over Time 14 12 10 8 6 4 2 0 Jan 09 Jan 11 Jan 13 Jan 15 Jan 17 Jan 19 Jan 21 Jan 08 Jan 10 Jan 12 Jan 14 Jan 16 Jan 18 Jan 20 Top Platforms by Visits 80 40 0 1 1 Top Platforms Platform Hits Visits Others 590 109 100.00% 1. Total 590 109 100.00% Top Platforms - Help Card www.netiq.com 100
  • 101. Top Platforms - Help Card Hit - A single action on the server as it appears in the log file. Each file requested by a visitor registers as a hit. There can be several hits on each Web page. While the volume of hits reflects the amount of server traffic, it is not an accurate reflection of the number of pages viewed. Platform - The operating system, for example Microsoft Windows NT, that a client uses when accessing a server. Visit - A session of activity, including all hits, for one user of a Web or FTP site, or for one user of a category. Tracking top platforms can help ensure that users in your organization are using operating systems for which they are licensed. If the report shows the platform as "Other," your firewall or proxy server does not log information about operating systems. www.netiq.com 101
  • 102. Analytical Statistics This page reports on the amount of memory that Security Reporting Center uses in its internal tables.This shows number of entries in the table as Count, the size of text for that table in bytes as Text and the amount of memory used by an actvity data in bytes as Data. Analytical Statistics Table Count Text Data DetailedProxyStatus 1 29 416 SummaryProxyStatus 1 17 416 TopAuthUsers 0 0 0 TopAuthUsersCore 0 0 0 TopAuthUsersGen 0 0 0 TopBandwidth 1 1 416 TopBrowsers 1 6 320 TopClientErrors 1 26 264 TopCoreDocs 0 0 0 TopCountries 1 18 320 TopDocuments 44 1,396 11,812 TopDownloads 2 96 556 TopExplorer 0 0 0 TopExtensions 9 50 3,404 TopGenDocs 35 1,663 9,436 TopHours 24 264 7,092 TopNetscape 0 0 0 TopPlatforms 1 6 320 TopSearchEngines 1 5 264 TopSearchKeywords 1 3 264 TopServerErrors 0 0 0 TopSuffixes 2 22 612 TopUsers 24 440 9,832 TopUsersCore 5 147 2,184 TopUsersGen 16 300 7,192 TopVisitedCoreCategories 0 0 0 TopVisitedGenCategories 0 0 0 TopVisitedSites 0 0 0 TopWeekdays 7 21 2,240 Total 177 4,510 57,360 Analytical Statistics - Help Card Count - The number of items in the table. Data - The amount of memory, in bytes, used by activity data and information about sites accessed for the table. This value does not include the memory used by text strings. www.netiq.com 102
  • 103. Analytical Statistics - Help Card Table - The Security Reporting Center table being analyzed. Text - The amount of memory, in bytes, used by the text for the table. Use this page to troubleshoot performance problems by determining which report tables consume the largest amount of memory. www.netiq.com 103
  • 104. This report was generated by NetIQ Monday, March 22, 2004 - 03:55:18 NetIQ is a registered trademark of NetIQ Corporation. Other trademarks are the property of their respective owners. www.netiq.com 104

×