Dashboard_Threat_Reports
Dashboard > Threat Reports
This section describes how to use the SonicWALL Threat Reports feature on a SonicWALL security appliance. This chapter contains the following sections:
SonicWALL Threat Reports Overview
This section provides an introduction to the Threat Reports feature. This section contains the following subsections:
What Are Threat Reports?
The SonicWALL Threat Reports provides reports of the latest threat protection data from a single SonicWALL appliance and aggregated threat protection data from SonicWALL security appliances deployed globally. The SonicWALL Threat Reports displays automatically upon successful authentication to a SonicWALL security appliance, and can be viewed at any time by navigating to the Dashboard > Threat Reports menu in the left-hand menu.
Reports in the Threat Reports include:
Each report includes a graph of threats blocked over time and a table of the top blocked threats. Reports, which are updated hourly, can be customized to display data for the last 12 hours, 14 days, 21 days, or 6 months. For easier viewing, SonicWALL Threat Reports reports can be transformed into a PDF file format with the click of a button.
Benefits
The Threat Reports provides the latest threat protection information to keep you informed about potential threats being blocked by SonicWALL security appliances. If you subscribe to SonicWALL’s security services, including Gateway Anti-Virus, Gateway Anti-Spyware, Intrusion Prevention Service (IPS), and Content Filtering Service, you are automatically protected from the threats reported by the SonicWALL Threat Reports. SonicWALL’s security services include ongoing new signature updates to protect against the latest virus and spyware attacks.
How Does the Threat Reports Work?
The SonicWALL Threat Reports provides global and appliance-level threat protection statistics. At the appliance level, threat protection data from your SonicWALL security appliance is displayed. At the global level, the SonicWALL Threat Reports is updated hourly from the SonicWALL backend server with aggregated threat protection data from globally-deployed SonicWALL security appliances. Data provided by the SonicWALL backend server is cached locally for reliable delivery.
To be protected from the threats reported in the SonicWALL Threat Reports, it is recommended that you purchase SonicWALL security services. For more information about SonicWALL security services, see SonicWALL Security Services.
Note: The SonicWALL security appliance must have Internet connectivity (including connection to a DNS server) to receive the latest threat protection statistics from the SonicWALL backend server, which reports aggregated data from globally deployed SonicWALL security appliances. If you lose connectivity, cached data from the last update will display, and the latest data will not be available until connectivity is restored.
SonicWALL Threat Reports Configuration Tasks
The SonicWALL Threat Reports can be configured to display global or appliance-level statistics, to display statistics for different time periods, and to generate a custom PDF file.
The SonicWALL Threat Reports displays automatically upon successful login to a SonicWALL security appliance. You can access the SonicWALL Threat Reports at any time by navigating to Dashboard > Threat Reports in the left-hand menu. You may see the introductory screen shown below while the appliance is gathering the latest threat data.
The following sections describe the Threat Report:
Switching to Global or Appliance-Level View
To view SonicWALL Threat Reports global reports, select the radio button next to Global in the top of the Dashboard > Threat Reports screen. To view appliance-level reports, select the radio button next to the appliance serial number.
Selecting Custom Time Interval
The SonicWALL Threat Reports reports default to a view of reports from the “Last 14 Days,” providing an aggregate view of threats blocked during that time period. You can configure each report to one of four optional time periods. Each report can be configured to reflect a different time period. To change a report to reflect a different time period, perform the following steps:
Generating a Threat Reports PDF
To create a PDF version of the SonicWALL Threat Reports, first select the desired view (global or appliance-level) and the desired time period for each report (the last 12 hours, 14 days, 21 days, or 6 months). Click the
button at the top of the page.