at the top of the page. Threat_Reports
This section describes how to use the Dell SonicWALL Threat Reports feature on a Dell SonicWALL appliance.
Topics:
• Dell SonicWALL Threat Reports Overview
• Dell SonicWALL Threat Reports Configuration Tasks
Dell SonicWALL Threat Reports Overview
Topics:
• Benefits
• How Does the Threat Reports Work?
The Dell SonicWALL Threat Reports provides reports of the latest threat protection data from a single Dell SonicWALL appliance and aggregated threat protection data from Dell SonicWALL appliances deployed globally. The Dell SonicWALL Threat Reports displays automatically upon successful authentication to a Dell SonicWALL appliance, and can be viewed at any time by navigating to the Dashboard > Threat Reports page.
These are the Threat Reports:
• Viruses Blocked
• Intrusions Prevented
• Spyware Blocked
• Multimedia (IM/P2P) Detected/Blocked
Each report includes a graph of threats blocked over time and a table of the top blocked threats. Reports, which are updated hourly, can be customized to display data for the last 12 hours, 14 days, 21 days, or 6 months. For easier viewing, Dell SonicWALL Threat Reports reports can be transformed into a PDF file format with the click of a button.
The Threat Reports provides the latest threat protection information to keep you informed about potential threats being blocked by Dell SonicWALL appliances. If you subscribe to Dell SonicWALL’s security services, including Gateway Anti-Virus, Gateway Anti-Spyware, Intrusion Prevention Service (IPS), and Content Filtering Service, you are automatically protected from the threats reported by the Dell SonicWALL Threat Reports. Dell SonicWALL’s security services include ongoing new signature updates to protect against the latest virus and spyware attacks.
How Does the Threat Reports Work?
The Dell SonicWALL Threat Reports provides global and appliance-level threat protection statistics. At the appliance level, threat protection data from your Dell SonicWALL appliance is displayed. At the global level, the Dell SonicWALL Threat Reports is updated hourly from the Dell SonicWALL backend server with aggregated threat protection data from globally-deployed Dell SonicWALL appliances. Data provided by the Dell SonicWALL backend server is cached locally for reliable delivery.
To be protected from the threats reported in the Dell SonicWALL Threat Reports, it is recommended that you purchase Dell SonicWALL security services. For more information about Dell SonicWALL security services, see SonicWALL Security Services.
Note The Dell SonicWALL appliance must have Internet connectivity (including connection to a DNS server) to receive the latest threat protection statistics from the Dell SonicWALL backend server, which reports aggregated data from globally deployed Dell SonicWALL appliances. If you lose connectivity, cached data from the last update will display, and the latest data will not be available until connectivity is restored.
Dell SonicWALL Threat Reports Configuration Tasks
The Dell SonicWALL Threat Reports can be configured to display global or appliance-level statistics, to display statistics for different time periods, and to generate a custom PDF file.
The Dell SonicWALL Threat Reports displays automatically upon successful login to a Dell SonicWALL appliance. You can access the Dell SonicWALL Threat Reports at any time by navigating to Dashboard > Threat Reports in the left-hand menu. The introductory Dashboard > Threat Reports page, shown below, displays while the latest data is retrieved before the System > Security Dashboard page displays.
Note The System > Security Dashboard page contains the Threat Reports. To display this page, you need to navigate to the Dashboard > Threat Reports page.
Topics:
• Switching to Global or Appliance-Level View
• Selecting Custom Time Interval
• Generating a Threat Reports PDF
Switching to Global or Appliance-Level View
To view Dell SonicWALL Threat Reports global reports, select the radio button next to Global in the top of the Dashboard > Threat Reports screen. To view appliance-level reports, select the radio button next to the appliance serial number.
Selecting Custom Time Interval
Dell SonicWALL Threat Reports provide an aggregate view of threats blocked during a specified time period. You can configure each report to one of four time periods. Each report can be configured to reflect a different time period.
To change a report to reflect a different time period, perform the following steps:
1. On the System > Security Dashboard page, select the report you want to change:
• Viruses Blocked
• Intrusions Prevented
• Spyware Blocked
• Multimedia (IM/P2P) Detected/Blocked
2. In the right-hand corner of the title bar of the selected report, select one of the following options from the Time Interval pull-down menu:
• Last 12 Hours - Displays threat information from the last 12 hours
• Last 14 Days (default) - Displays threat information from the last 14 days
• Last 21 Days - Displays threat information from the last 21 days
• Last 6 Months - Displays threat information from the last 6 months
Generating a Threat Reports PDF
To create a PDF version of the Dell SonicWALL Threat Reports, first select the desired view (global or appliance-level) and the desired time period for each report (the last 12 hours, 14 days, 21 days, or 6 months). Click the words Download PDF at the top of the page.