HP Network Protector SDN Application Administrator Guide

Reports
You can generate reports from the network traffic generated in the system and compiled by the
application. These reports detail the total network traffic generated, the threats encountered by the
system, and the traffic trends. The Reports screen also provides real-time graphs of the DNS network
statistics and report management and scheduling features.
Type of reports
When you create a report, you select a template and modify its settings. These report templates
track all issues, specific threat types, blocked DNS requests, and the top ten malicious DNS requests
encountered.
DescriptionReport type
Total number of DNS requests report displays all the DNS
requests generated by all the hosts in the network during
Total DNS requests
a particular time interval. This helps you understand the
DNS traffic patterns in the network and manage the
network traffic based on this report. When the total number
of requests is beyond the threshold limit, you can disable
application.
Total number of DNS requests report displays all the
blocked DNS requests by application per unit time.
Total blocked DNS requests
The Top 10 malicious DNS requests report displays
information about the most frequent malicious attacks that
Top 10 malicious DNS requests
target your network. The report enables you to determine
the type malicious attacks and the behavior of the traffic
during detection and block procedures.
Threat type percentages report displays the threat types to
the network in the form of a percentage. This report enables
you to determine the type of threats to the network.
Threat type percentages
The Total malicious DNS requests report displays
information about all the attacks that target your network
Total malicious DNS requests
during a particular time interval. The report enables you
to determine the type of malicious attacks and the behavior
of the traffic during detection and block procedures.
Total malicious end hosts report display all the end hosts
which are making malicious DNS requests and their count
Total malicious end hosts
during a particular time interval. This report enables you
to identify the hosts making the malicious requests.
Top 100 talkers report display all the hosts with their DNS
request count which includes good and malicious for the
Top 100 talkers
given time. This report enables you to find out network
usage by end hosts. This report can be rendered only for
three months window. It can be any three months.
Generating reports
To generate reports:
1. Select Reports→ System.
The Systems page appears.
2. Click the icon to configure the report options.
3. From the Data Type options, select an option to generate the report.
4. From the Report Type options, select Table or Graph option depending on how you want the
report rendered.
Reports 51