Enabling Data Privacy Settings

The Reports Privacy feature allows a GMS Super Admin to configure the GMS system to mask all IPs, user names, and host names in Reports.

Consider the following before enabling the Data Privacy settings:

•	The Data Privacy setting is a system wide setting, and cannot be granularly set for each unit or each domain separately.

•	This feature applies only to the Reports under the Reports tab and Live Monitor/Syslog Viewer pages in the Monitor panel. It does not apply to other places in the GMS UI that could have IPs, usernames, and so on. This means the following are not included:-

•	Policy Tab screens

•	Console Tab screens such as Console > Logs.

•	Requires a double-authentication mechanism to unmask identities.

•

Unmasking reports through double-authentication is only for on-demand management interface based reports. Other reports, such as Scheduled Reports or Webservices based reports, are sent masked if the global system setting is set for Reports Privacy. The only way to view actual IPs in the Scheduled Reports is by disabling the privacy feature at system level.

•	IPs, Hostnames and User Names are masked for any “private” IPs (such as subnets 192.168.255.255, 172.31.255.255, 10.255.255.255). This happens for both Initiators and Responders, in the Grids and Charts.

•	This feature is available only for UTM Reports, and not for SRA and CDP reports

•	The masked entries do not allow the one-click mechanism to add it to the Filter bar.

•	Filter Bar does not allow adding Initiators and Responders filters.

•	Any Custom Report that has Initiators or Responders will not generate a report.

•	The User Activity report will not generate reports.

•	Scheduled Reports will always have the above information masked;

•	Scheduled Reports containing Custom Reports that have Initiators or Responders will not generate any Customer Report data.

To enable the Data Privacy Settings, complete the following:

1	Navigate to the Console > Management > Settings page.

2	Click Enable Data Privacy, and then click Update.

The IPs, user names, and host names are now masked in the reports.

NOTE: Privileges to unmask reports can be set for designated users if the Super Admin or User changes the Action Permissions to “Can Unmask Reports.” Those users can then click the Unmask icon while viewing a masked report, enter their credentials, and the report displays unmasked. See Configuring Action Permissions and Unmask Reports for more details.