User guide

Chapter 15: Generating Reports of Network Activity
212 WatchGuard Firebox System
6 Click OK.
Manually running a report
At any time, you can run one or more reports using Historical Reports.
From Historical Reports:
1 Enable the checkbox next to each report you would like to generate.
2 Click Run.
Report Sections and Consolidated Sections
You can use Historical Reports to build a report that includes one or more
sections. Each section represents a discrete type of information or network
activity.
You can consolidate certain sections to summarize particular types of
information. Consolidated sections summarize the activity of all devices
being monitored as a group as opposed to individual devices.
Report sections
Report sections can be divided into two basic types:
• Summary – Sections that rank information by bandwidth or
connections.
• Detailed – Sections that display all activity with no summary graphs
or ranking.
The following is a listing of the different types of report sections and
consolidated sections.
Firebox Statistics
A summary of statistics on one or more log files for a single
Firebox.
Authentication Detail
A detailed list of authenticated users sorted by connection time.
Fields include: authenticated user, host, start date of authenticated
session, start time of authenticated session, end time of
authenticated session, and duration of session.