Reporting : SMA Reporting Overview
Viewing Available SMA Report Types
To view the available types of reports for SMA Web Application Firewalls (WAF), complete the following steps:
1
Log into your GMS management console.
2
Click the SMA tab.
3
Click the Reports tab on the top of the screen. The following types of reports are available:
For E-Class SMA series appliances
Group Level Reports:
•
Data Usage
•
Summary: connections per SMA appliance
•
WAF
•
Summary: connections listed by appliance for one day (default)
•
Connections
•
Summary: offloaded connections listed by appliance for one day (default)
Unit Level Reports:
Clicking on hyperlinks in the Unit Level Reports takes you to the Analyzer Log where you can view more information.
•
Data Usage
•
Timeline: total connections listed by hour
•
Users: connections listed by user
•
User Activity
•
Details: a detailed report of activity for the specified user
•
Access Method
•
Summary: connections per connection protocol (HTTPS, NetExtender, and so on.)
•
Users: top users by protocol
•
Authentication
•
User login: authenticated user logins by time and IP protocol. User Login reports combine admin users with all other users in the same report.
•
Failed login: Failed login attempts with initiator IP address.
•
Up/Down
•
Timeline: uptime and downtime by hour for one day
•
Custom Reports
•
Manage Reports: manage custom reports
•
Analyzers
•
Log Analyzer: logs of all activity
•
Configuration: menus allow setting Report display options
•
Syslog Filter: applies filters to the system logs uploaded to the reporting database
•
Events: these menus allow setting options
•
Alert Settings: provides search functions, adding or removing Alerts
•
Current Alerts: displays current applicable Alerts.Custom
For SMA series appliances:
Group Level Reports:
•
Data Usage
•
Summary: connections per SMA appliance
•
WAF
•
Summary: connections listed by appliance for one day (default)
•
Connections
•
Summary: offloaded connections listed by appliance for one day (default)
Unit Level Reports:
Clicking on hyperlinks in the Unit Level Reports takes you to the Analyzer Log where you can view more information.
•
Data Usage
•
Timeline: total connections listed by hour
•
Users: connections listed by user
•
User Activity
•
Details: a detailed report of activity for the specified user
•
Access Method
•
Summary: connections per connection protocol (HTTPS, NetExtender, and so on.)
•
Users: top users by protocol
•
Authentication
•
User login: authenticated user logins by time and IP protocol. User Login reports combine admin users with all other users in the same report.
•
Failed login: Failed login attempts with initiator IP address.
•
WAF
•
Timeline: total threats detected per appliance
•
Threats Detected: top threats detected per day
•
Threats Prevented: top threats prevented per day
•
Apps Detected: top applications detected per day
•
Apps Prevented: top applications blocked per day
•
Users Detected: number of concurrent users per day
•
Users Prevented: number of blocked users prevented per day
•
Connections
•
Timeline: a summary of offloaded connections under the group node per SMA appliance, listed for one day.
•
Applications: offloaded connections by application
•
Users: offloaded connections by user
•
Up/Down
•
Timeline: uptime and downtime by hour for one day
•
Custom Reports
•
Manage Report: manage your custom reports
•
Analyzers
•
Log Analyzer: logs of all activity
•
Configuration: menus allow setting Report display options
•
Log Analyzer Filter: applies filters to the system logs uploaded to the reporting database
•
Events: these menus allow setting options
•
Alert Settings: provides search functions, adding or removing Alerts
•
Current Alerts: displays current applicable Alerts.Custom
* 
NOTE: You can use the Date Selector to select reports covering other intervals than those listed here.