135
Sample Proxy Profile - Firewall Log Analysis Custom Report January 2002 Report Range: Jan 8, 2002 - Jan 21, 2002 www.netiq.com

Sample Proxy Profile - Firewall

Embed Size (px)

Citation preview

Page 1: Sample Proxy Profile - Firewall

Sample Proxy Profile - Firewall

Log Analysis Custom Report January 2002

Report Range: Jan 8, 2002 - Jan 21, 2002

www.netiq.com

Page 2: Sample Proxy Profile - Firewall

Table Of Contents

General Proxy Statistics.....................................................................................5

Top Sites..............................................................................................................7

Top Sites by User..............................................................................................10

Top Sites by Authenticated User.....................................................................13

Top Pages..........................................................................................................16

Top File Types...................................................................................................19

Top Download Files...........................................................................................21

Top Users...........................................................................................................23

Top Users by Site..............................................................................................26

Top Authenticated Users..................................................................................30

Top Authenticated Users by Site.....................................................................32

Top Core Categories.........................................................................................35

Top Core Category Pages.................................................................................37

Core Category Visits by User...........................................................................39

Users Visiting Core Categories........................................................................41

Users Visiting Sites in Core Categories..........................................................43

Users Visiting Pages in Core Categories........................................................45

Core Category Visits by Authenticated User..................................................47

Authenticated Users Visiting Core Categories...............................................49

Authenticated Users Visiting Sites in Core Categories.................................51

www.netiq.com2

Page 3: Sample Proxy Profile - Firewall

Authenticated Users Visiting Pages in Core Categories...............................53

Top General Categories....................................................................................55

Top General Category Pages...........................................................................58

General Categories by User.............................................................................61

Users Visiting General Categories...................................................................65

Users Visiting Sites in General Categories.....................................................69

General Category Visits by Authenticated Users...........................................72

Authenticated Users Visiting General Categories..........................................75

Authenticated Users Visiting Sites in General Categories............................78

Top-Level Domain Types..................................................................................81

Top Countries....................................................................................................83

Activity Summary..............................................................................................85

Kbytes over Time...............................................................................................86

Activity by Day of the Week..............................................................................88

Activity by Hour of the Day...............................................................................90

Proxy Cache.......................................................................................................92

Proxy Cache Details..........................................................................................94

Client Errors.......................................................................................................95

Top Browsers.....................................................................................................96

Top Search Engines..........................................................................................98

Top Search Keywords.......................................................................................99

www.netiq.com3

Page 4: Sample Proxy Profile - Firewall

Top Platforms..................................................................................................100

Analytical Statistics............................................................................................102

www.netiq.com4

Page 5: Sample Proxy Profile - Firewall

General Proxy Statistics

This page provides a basic summary of proxy activity.

0

200

400

600

800

1,000

1,200

1,400

1,600

1,800

2,000

Jan 08Jan 09

Jan 10Jan 11

Jan 12Jan 13

Jan 14Jan 15

Jan 16Jan 17

Jan 18Jan 19

Jan 20Jan 21

Kbytes Over TimeKbytes Over Time

General Proxy StatisticsVisits 109 7.786Unique Users 24 1.714Sites Visited 58 4.143Hits 590 42.143Kbytes Transferred 15,755 1,125.357Page Views 67 4.786

Dates and TimesTime Frame CustomStart Time for Statistics Shown 01/08/2002 00:00:00End Time for Statistics Shown 01/21/2002 23:59:59Earliest Data within Range 01/08/2002 01:53:23Latest Data within Range 01/21/2002 11:32:27Content DB Last Updated 03/22/2004 15:54:49Report Creation Time 03/22/2004 15:55:08

General Proxy Statistics - Help Card

Content Database - The database containing the content from which Security Reporting Center reports are generated. Hit - A single action on the server as it appears in the log file. Each file requested by a visitor

www.netiq.com5

Page 6: Sample Proxy Profile - Firewall

General Proxy Statistics - Help Cardregisters as a hit. There can be several hits on each Web page. While the volume of hits reflects the amount of server traffic, it is not an accurate reflection of the number of pages viewed. Kbytes - Short for kilobytes. A kilobyte is 1024 bytes. Page View - One instance of a user accessing a page on the World Wide Web. Potentially, any static or dynamic Web content may be defined as a page by a Security Reporting Center System Admin. Typically, a page includes all static content, such as complete html pages. Dynamic Web content, which is created with variables and does not exist anywhere in a static form, may be considered as a page if the administrator wishes to include it in reports. Site - A location on the World Wide Web comprising one or more related pages that are owned or managed by the same individual, company, or organization. A site may be the central access point for a group of Web pages or a group of files available for download, as with an FTP site. It is usually identified by the Web address of its central access page, the home page. Visit - A session of activity, including all hits, for one user of a Web or FTP site, or for one user of a category.

Use this page as an overview of outgoing Web activity in your network, including the number of site visits, the number of unique users, the number of visited sites, the number of hits, the amount of data transferred, and the number of pages viewed during the report period. Individual report chapters provide details on the general statistics provided on this page.

www.netiq.com6

Page 7: Sample Proxy Profile - Firewall

Top Sites

This page shows the top Web and FTP sites users accessed by number of hits and site visits.

w w w .unknow n.com

w w w .abc.com

w w w .alphasoftw are.com

w w w .domain.com

w w w .hello.com0

1

2

3

4

Jan 08Jan 09

Jan 10Jan 11

Jan 12Jan 13

Jan 14Jan 15

Jan 16Jan 17

Jan 18Jan 19

Jan 20Jan 21

Top Sites by Visits over TimeTop Sites by Visits over Time

1 2 3 4 5 6 7 8 9 10

11 12 13 14 15 16 17 18 19 20

0

1

2

3

4

5

6

7

8

9

10

11

12

13

12

34

56

78

910

1112

1314

1516

1718

1920

Top Sites By VisitsTop Sites By Visits

www.netiq.com7

Page 8: Sample Proxy Profile - Firewall

Top SitesSite Hits Visits

1.www.unknown.com 13 13 9.09%

2.www.alphasoftware.com 158 12 8.39%

3.www.abc.com 12 12 8.39%

4.www.domain.com 12 12 8.39%

5.www.hello.com 12 12 8.39%

6.www.test.com 12 12 8.39%

7.www.egsoftware.com 6 6 4.19%

8.us.yimg.com 11 4 2.79%

9.www7.cnn.com 19 3 2.09%

10.www.suck.com 30 2 1.39%

11.www.playboy.com 26 2 1.39%

12.web.zdnet.com 21 2 1.39%

13.www7.yahoo.com 12 2 1.39%

14.205.24.125.15 2 2 1.39%

15.p5.yahoo.com 2 2 1.39%

16.www.other.com 2 2 1.39%

17.www.prnewswire.com 2 2 1.39%

18.www.casino.com 18 1 0.69%

19.www.amazon.com 17 1 0.69%

20.www.espn.com 16 1 0.69%

Subtotal 403 105 73.42%Other 187 38 26.57%Total 590 143 100.00%

Top Sites - Help Card

www.netiq.com8

Page 9: Sample Proxy Profile - Firewall

Top Sites - Help CardHit - A single action on the server as it appears in the log file. Each file requested by a visitor registers as a hit. There can be several hits on each Web page. While the volume of hits reflects the amount of server traffic, it is not an accurate reflection of the number of pages viewed. Site - A location on the World Wide Web comprising one or more related pages that are owned or managed by the same individual, company, or organization. A site may be the central access point for a group of Web pages or a group of files available for download, as with an FTP site. It is usually identified by the Web address of its central access page, the home page. Visit - A session of activity, including all hits, for one user of a Web or FTP site, or for one user of a category.

Use this page for an overview of the most popular Web and FTP sites accessed by users in your organization.

www.netiq.com9

Page 10: Sample Proxy Profile - Firewall

Top Sites by User

This page shows the Web and FTP sites most frequently accessed through the proxy server and the users who accessed them.

w w w .unknow n.com

w w w .abc.com

w w w .alphasoftw are.com

w w w .domain.com

w w w .hello.com0

1

2

3

4

Jan 08Jan 09

Jan 10Jan 11

Jan 12Jan 13

Jan 14Jan 15

Jan 16Jan 17

Jan 18Jan 19

Jan 20Jan 21

Top Sites by Visits over TimeTop Sites by Visits over Time

1 2 3 4 5 6 7 8 9 10

11 12 13 14 15 16 17 18 19 20

0

1

2

3

4

5

6

7

8

9

10

11

12

13

12

34

56

78

910

1112

1314

1516

1718

1920

Top Sites by VisitsTop Sites by Visits

www.netiq.com10

Page 11: Sample Proxy Profile - Firewall

Top Sites by UserSite User Hits Visits Time Kbytes

1.www.unknown.com 192.168.99.25 6 6 00:00:00 854

192.168.99.245 4 4 00:00:00 570richardg.internal.webtrends.com

2 2 00:00:00 157

WEBTRENDS-NT 1 1 00:00:00 71Total 13 13 00:00:00 1,652

2.www.abc.com 192.168.99.212 12 12 00:00:00 1,709

3.www.alphasoftware.com

jasong.internal.webtrends.com

158 12 00:15:45 1,082

4.www.domain.com 192.168.99.29 6 6 00:00:00 2,133

192.168.99.269 4 4 00:00:00 570richardg.internal.webtrends.com

2 2 00:00:00 157

Total 12 12 00:00:00 2,860

5.www.hello.com 192.168.99.28 6 6 00:00:00 854

192.168.99.278 4 4 00:00:00 570richardg.internal.webtrends.com

2 2 00:00:00 157

Total 12 12 00:00:00 1,581

6.www.test.com 192.168.99.202 12 12 00:00:00 1,453

7.www.egsoftware.com WEBTRENDS-NT 6 6 00:00:00 429

8.us.yimg.com andreag.internal.webtr

ends.com10 2 00:00:02 11

jasong.internal.webtrends.com

1 1 00:00:00 1

Total 11 3 00:00:02 12

9.www7.cnn.com andreag.internal.webtr

ends.com19 3 00:00:37 118

10.205.24.125.15 192.168.99.200 1 1 00:00:00 505

192.168.99.24 1 1 00:00:00 6Total 2 2 00:00:00 510

11.p5.yahoo.com andreag.internal.webtr

ends.com2 2 00:00:00 52

12.web.zdnet.com andreag.internal.webtr

ends.com21 2 00:00:02 56

13.www.astrologers.com jasong.internal.webtre

nds.com13 2 00:02:02 98

14.www.deja.com jasong.internal.webtre

nds.com11 2 00:00:09 61

www.netiq.com11

Page 12: Sample Proxy Profile - Firewall

Top Sites by UserSite User Hits Visits Time Kbytes

15.www.monsterboard.com

jasong.internal.webtrends.com

11 2 00:00:09 61

16.www.other.com WEBTRENDS-NT 2 2 00:00:00 15

17.www.playboy.com petera.internal.webtre

nds.com16 1 00:00:11 57

richardg.internal.webtrends.com

10 1 00:00:02 25

Total 26 2 00:00:13 82

18.www.suck.com jasong.internal.webtre

nds.com10 1 00:01:03 35

philm.internal.webtrends.com

20 1 00:01:01 71

Total 30 2 00:02:04 106

19.www7.yahoo.com andreag.internal.webtr

ends.com12 2 00:00:06 15

20.151.196.88.246 jasong.internal.webtre

nds.com5 1 00:00:09 9

Subtotal 390 106 00:21:18 11,961Other 200 38 03:05:09 3,794Total 590 144 03:26:27 15,755

Top Sites by User - Help Card

Hit - A single action on the server as it appears in the log file. Each file requested by a visitor registers as a hit. There can be several hits on each Web page. While the volume of hits reflects the amount of server traffic, it is not an accurate reflection of the number of pages viewed. Kbytes - Short for kilobytes. A kilobyte is 1024 bytes. Site - A location on the World Wide Web comprising one or more related pages that are owned or managed by the same individual, company, or organization. A site may be the central access point for a group of Web pages or a group of files available for download, as with an FTP site. It is usually identified by the Web address of its central access page, the home page. User - A client computer identified by a unique IP address. Visit - A session of activity, including all hits, for one user of a Web or FTP site, or for one user of a category.

Use this page to see which users accessed the most popular sites during the report period, how often they visited, and how much bandwidth was consumed during each user's visits to a given site.

www.netiq.com12

Page 13: Sample Proxy Profile - Firewall

Top Sites by Authenticated User

This page shows the Web and FTP sites most frequently accessed through the proxy server and the authenticated users who accessed them. Site visits by non-authenticated users are not included.

1 2 3 4 5 6 7 8 9 10

11 12 13 14 15 16 17 18 19 20

0

1

2

3

12

34

56

78

910

1112

1314

1516

1718

1920

Top Sites Visited by Authenticated Users by VisitsTop Sites Visited by Authenticated Users by Visits

Top Sites by Authenticated UserSite User Hits Visits Time Kbytes

1.www7.cnn.com AndreaG 19 3 8.10% 00:00:37 118

2.p5.yahoo.com AndreaG 2 2 5.40% 00:00:00 52

3.us.yimg.com AndreaG 10 2 5.40% 00:00:02 11

4.web.zdnet.com AndreaG 21 2 5.40% 00:00:02 56

5.www.domain.com RichardG 2 2 5.40% 00:00:00 157

6.www.hello.com RichardG 2 2 5.40% 00:00:00 157

7.www.playboy.com PeterA 16 1 2.70% 00:00:11 57

www.netiq.com13

Page 14: Sample Proxy Profile - Firewall

Top Sites by Authenticated UserSite User Hits Visits Time Kbytes

RichardG 10 1 2.70% 00:00:02 25Total 26 2 5.40% 00:00:13 82

8.www.unknown.com RichardG 2 2 5.40% 00:00:00 157

9.www7.yahoo.com AndreaG 12 2 5.40% 00:00:06 15

10.ads1.zdnet.com AndreaG 1 1 2.70% 00:00:00 2

11.e7.zdnet.com AndreaG 1 1 2.70% 00:00:00 11

12.ne1.news.com AndreaG 6 1 2.70% 00:01:18 47

13.www.amazon.com AndreaG 17 1 2.70% 00:10:07 90

14.www.budweiser.com RichardG 6 1 2.70% 00:00:07 32

15.www.century21.com JohnX 15 1 2.70% 00:02:01 101

16.www.comics.org TaraM 10 1 2.70% 00:30:08 58

17.www.deja.com JasonG 8 1 2.70% 00:00:08 46

18.www.desertpalace.com

JeremyN 5 1 2.70% 00:00:00 30

19.www.espn.com PhilM 16 1 2.70% 00:50:00 93

20.www.gamecenter.com

TaraM 11 1 2.70% 00:10:00 61

Subtotal 192 30 81.08% 01:44:49 1,376Other 77 7 18.91% 01:21:17 378Total 269 37 100.00% 03:06:06 1,754

Top Sites by Authenticated User - Help Card

Authenticated User - A user who provided a username and password in order to log on to an FTP or Web site. Hit - A single action on the server as it appears in the log file. Each file requested by a visitor registers as a hit. There can be several hits on each Web page. While the volume of hits reflects the amount of server traffic, it is not an accurate reflection of the number of pages viewed. Kbytes - Short for kilobytes. A kilobyte is 1024 bytes. Site - A location on the World Wide Web comprising one or more related pages that are owned or managed by the same individual, company, or organization. A site may be the central access point for a group of Web pages or a group of files available for download, as with an FTP site. It is usually identified by the Web address of its central access page, the home page.

www.netiq.com14

Page 15: Sample Proxy Profile - Firewall

Top Sites by Authenticated User - Help Card User - A client computer identified by a unique IP address. Visit - A session of activity, including all hits, for one user of a Web or FTP site, or for one user of a category.

Use this page to focus on sites that required a login and the users who accessed them. Site visits by non-authenticated users are not included.

www.netiq.com15

Page 16: Sample Proxy Profile - Firewall

Top Pages

This page lists the top pages your proxy server accessed on the Internet.

http://w w w .alphasoftw are.com/cleanpro/index.html

http://151.196.88.246/

http://151.196.88.246/%20

http://inet1.tek.com/Gallery/camera2/

http://ne1.new s.com/0

1

2

Jan 08Jan 09

Jan 10Jan 11

Jan 12Jan 13

Jan 14Jan 15

Jan 16Jan 17

Jan 18Jan 19

Jan 20Jan 21

Top Pages by Visits over TimeTop Pages by Visits over Time

1 2 3 4 5 6 7 8 9 10

11 12 13 14 15 16 17 18 19 20

0

1

2

3

4

5

6

7

8

9

10

11

12

12

34

56

78

910

1112

1314

1516

1718

1920

Top Pages By VisitsTop Pages By Visits

www.netiq.com16

Page 17: Sample Proxy Profile - Firewall

Top PagesPage Visits Views Avg. Time

1.http://www.domain.com/INTL/swell.asp 12 20.33% 12 00:00:00

2.http://p5.yahoo.com/ 2 3.39% 2 00:00:04

3.http://www.alphasoftware.com/cleanpro/index.html

2 3.39% 5 00:00:15

4.http://www.playboy.com/ 2 3.39% 2 00:00:02

5.http://www.suck.com/almanac/wx/pdx.shtml

2 3.39% 3 00:00:57

6.http://151.196.88.246/ 1 1.69% 1 00:00:00

7.http://151.196.88.246/%20 1 1.69% 1 00:00:09

8.http://inet1.tek.com/Gallery/camera2/ 1 1.69% 1 00:00:09

9.http://ne1.news.com/ 1 1.69% 1 00:00:00

10.http://p6.yahoo.com/ 1 1.69% 1 00:00:00

11.http://q9.yahoo.com/quotes 1 1.69% 1 00:00:50

12.http://web.zdnet.com/ 1 1.69% 1 00:00:00

13.http://web.zdnet.com/home/filters/maina.html

1 1.69% 1 00:00:00

14.http://www.alphasoftware.com/antivirus/index.html

1 1.69% 1 00:00:20

15.http://www.amazon.com/ 1 1.69% 2 00:00:07

16.http://www.amazon.com/creed/index.html

1 1.69% 2 00:09:53

17.http://www.astrologers.com/ 1 1.69% 1 00:00:00

18.http://www.budweiser.com/ 1 1.69% 1 00:00:00

19.http://www.casino.com/ 1 1.69% 1 00:00:12

20.http://www.century21.com/ 1 1.69% 1 00:00:07

Subtotal 35 59.32% 41 00:13:05Other 24 40.67% 26 01:03:07Total 59 100.00% 67 01:16:12

Top Pages - Help Card

www.netiq.com17

Page 18: Sample Proxy Profile - Firewall

Top Pages - Help CardPage - Potentially, any static or dynamic Web content defined as a page by a Security Reporting Center System Admin. Typically a page includes all static content, such as complete html pages. Dynamic Web content, which is created with variables and does not exist anywhere in a static form, may be considered as a page if the administrator wishes to include it in reports. View - An instance where a user accesses one Web or FTP page. Visit - A session of activity, including all hits, for one user of a Web or FTP site, or for one user of a category.

This page ranks the Web and FTP pages your users accessed by the number of visits and page views. It also shows the average time spent on each page, allowing you to assess how often your users accessed each page and how much time was consumed there during the report period.

www.netiq.com18

Page 19: Sample Proxy Profile - Firewall

Top File Types

This page shows the file types users downloaded, how many of each type were downloaded, and the total number of kilobytes downloaded for each file type.

1 2 3 4 5 6 7 8 9

0

40

80

120

160

200

240

280

320

360

400

12

34

56

78

9

Top File Types by File CountTop File Types by File Count

Top File TypesFile type File Count Kbytes

1.*.gif 373 71.18% 6,429

2.*.jpg 97 18.51% 613

3.*.html 21 4.00% 218

4.*.log 14 2.67% 3,193

5.*.asp 12 2.29% 2,860

6.*.shtml 3 0.57% 34

7.*.zip 2 0.38% 3

*.class 1 0.19% 26

www.netiq.com19

Page 20: Sample Proxy Profile - Firewall

Top File TypesFile type File Count Kbytes

8.

9.*.exe 1 0.19% 1

Total 524 100.00% 13,376

Top File Types - Help Card

File Type - A specific type of file format. Different file types are identified by their file extensions or suffixes, such as .htm, .gif, or .asp. Files may exist permanently in static form or be generated dynamically when a user accesses a page on the World Wide Web. A Security Reporting Center administrator defines which file types can be included in reports and whether or not to include dynamically-generated files of each type. Kbytes - Short for kilobytes. A kilobyte is 1024 bytes.

This information can be helpful in tracking usage patterns in order to monitor and enforce network security policies. For example, you can determine whether downloading particular types of images or programs is consuming a large amount of bandwidth.

www.netiq.com20

Page 21: Sample Proxy Profile - Firewall

Top Download Files

This page shows the filenames of the files most frequently downloaded through your proxy server.

http://w w w .century21.com/forsale/eastside.zip

http://w eb.zdnet.com/dow nloads/games/fps/quake3.exe

0

1

2

Jan 08Jan 09

Jan 10Jan 11

Jan 12Jan 13

Jan 14Jan 15

Jan 16Jan 17

Jan 18Jan 19

Jan 20Jan 21

Top Downloaded Files by Count over Time Top Downloaded Files by Count over Time

1 2

0

1

2

12

Top Downloaded Files by CountTop Downloaded Files by Count

Top Download FilesFile Download Count Visits

1.http://www.century21.com/forsale/eastside.zip

2 66.66% 1

2.http://web.zdnet.com/downloads/games/fps/quake3.exe

1 33.33% 1

Total 3 100.00% 2

www.netiq.com21

Page 22: Sample Proxy Profile - Firewall

Top Download Files - Help Card

Download - A file downloaded from a Web or FTP site. The list of file types counted as download files is configured by a Security Reporting Center System Admin in the Download File Types panel, and may or may not include files generated dynamically. Visit - A session of activity, including all hits, for one user of a Web or FTP site, or for one user of a category.

Use this page to determine the actual files your users downloaded most frequently.

www.netiq.com22

Page 23: Sample Proxy Profile - Firewall

Top Users

This page shows the most active hostnames or IP addresses connecting to the proxy server.

jasong.internal.w ebtrends.com

WEBTRENDS-NT

andreag.internal.w ebtrends.com

192.168.99.124

192.168.99.140

1

2

3

4

5

6

7

Jan 08Jan 09

Jan 10Jan 11

Jan 12Jan 13

Jan 14Jan 15

Jan 16Jan 17

Jan 18Jan 19

Jan 20Jan 21

Top Users by Visits over TimeTop Users by Visits over Time

1 2 3 4 5 6 7 8 9 10

11 12 13 14 15 16 17 18 19 20

0

2

4

6

8

10

12

14

16

12

34

56

78

910

1112

1314

1516

1718

1920

Top Users by VisitsTop Users by Visits

www.netiq.com23

Page 24: Sample Proxy Profile - Firewall

Top UsersUser Hits Visits Cost

1.jasong.internal.webtrends.com 250 17 15.59% $8.53

2.192.168.99.202 12 12 11.00% $7.84

3.192.168.99.212 12 12 11.00% $9.22

4.WEBTRENDS-NT 9 9 8.25% $2.78

5.192.168.99.25 7 7 6.42% $6.28

6.192.168.99.28 6 6 5.50% $4.61

7.192.168.99.29 6 6 5.50% $11.51

8.andreag.internal.webtrends.com 90 6 5.50% $2.17

9.192.168.99.200 8 5 4.58% $14.45

10.192.168.99.245 4 4 3.67% $3.07

11.192.168.99.269 4 4 3.67% $3.07

12.192.168.99.278 4 4 3.67% $3.07

13.richardg.internal.webtrends.com 22 3 2.75% $2.85

14.taram.internal.webtrends.com 77 3 2.75% $2.30

15.philm.internal.webtrends.com 36 2 1.83% $0.88

16.192.168.99.124 1 1 0.91% $0.27

17.192.168.99.14 2 1 0.91% $0.54

18.192.168.99.225 1 1 0.91% $0.27

19.192.168.99.24 1 1 0.91% $0.03

20.202.98.163.28 1 1 0.91% $0.21

Subtotal 553 105 96.33% $83.95Other 37 4 3.67% $1.12Total 590 109 100.00% $85.07

Top Users - Help Card

www.netiq.com24

Page 25: Sample Proxy Profile - Firewall

Top Users - Help CardHit - A single action on the server as it appears in the log file. Each file requested by a visitor registers as a hit. There can be several hits on each Web page. While the volume of hits reflects the amount of server traffic, it is not an accurate reflection of the number of pages viewed. Proxy Server - A firewall or other device that intercepts, tracks, manages, and responds to requests to application servers from client computers in a network. For example, a proxy server may forward a user's request for a Web page to a Web server. User - A client computer identified by a unique IP address. Visit - A session of activity, including all hits, for one user of a Web or FTP site, or for one user of a category.

Use this page to get a picture of the users who were most active during the report period, the times when they were active, the duration of their visits, and the bandwidth their visits consumed.

www.netiq.com25

Page 26: Sample Proxy Profile - Firewall

Top Users by Site

This page shows the most active hostnames or IP addresses connecting to the proxy server and the sites they visited most frequently.

jasong.internal.w ebtrends.com

WEBTRENDS-NT

andreag.internal.w ebtrends.com

192.168.99.124

192.168.99.140

1

2

3

4

5

6

7

Jan 08Jan 09

Jan 10Jan 11

Jan 12Jan 13

Jan 14Jan 15

Jan 16Jan 17

Jan 18Jan 19

Jan 20Jan 21

Top Users by Visits over Time Top Users by Visits over Time

1 2 3 4 5 6 7 8 9 10

11 12 13 14 15 16 17 18 19 20

0

2

4

6

8

10

12

14

16

12

34

56

78

910

1112

1314

1516

1718

1920

Top Users by VisitsTop Users by Visits

www.netiq.com26

Page 27: Sample Proxy Profile - Firewall

Top Users by SiteUser Site Hits Visits Time Kbytes

1.jasong.internal.webtrends.com

www.alphasoftware.com

158 12 00:15:45 1,082

www.astrologers.com 13 2 00:02:02 98www.deja.com 11 2 00:00:09 61www.monsterboard.com

11 2 00:00:09 61

151.196.88.246 5 1 00:00:09 9206.119.169.220 1 1 00:00:00 2ics.ic3.com 11 1 00:00:21 64inet1.tek.com 1 1 00:00:00 1p6.yahoo.com 1 1 00:00:00 26q9.yahoo.com 1 1 00:00:00 12us.yimg.com 1 1 00:00:00 1www.casino.com 18 1 00:00:12 98www.prnewswire.com 2 1 00:00:01 17www.suck.com 10 1 00:01:03 35www6.yahoo.com 6 1 00:00:38 14Total 250 29 00:20:29 1,580

2.andreag.internal.webtrends.com

www7.cnn.com 19 3 00:00:37 118

p5.yahoo.com 2 2 00:00:00 52us.yimg.com 10 2 00:00:02 11web.zdnet.com 21 2 00:00:02 56www7.yahoo.com 12 2 00:00:06 15ads1.zdnet.com 1 1 00:00:00 2e7.zdnet.com 1 1 00:00:00 11ne1.news.com 6 1 00:01:18 47www.amazon.com 17 1 00:10:07 90www1.zdnet.com 1 1 00:00:00 1Total 90 16 00:12:12 402

3.192.168.99.202 www.test.com 12 12 00:00:00 1,453

4.192.168.99.212 www.abc.com 12 12 00:00:00 1,709

5.WEBTRENDS-NT www.egsoftware.com 6 6 00:00:00 429

www.other.com 2 2 00:00:00 15www.unknown.com 1 1 00:00:00 71Total 9 9 00:00:00 515

6.192.168.99.200 163.25.24.85 1 1 00:00:00 50

163.25.24.86 1 1 00:00:00 505165.51.25.83 1 1 00:00:00 50169.51.20.55 1 1 00:00:00 505175.25.61.20 1 1 00:00:00 505

www.netiq.com27

Page 28: Sample Proxy Profile - Firewall

Top Users by SiteUser Site Hits Visits Time Kbytes

205.24.125.15 1 1 00:00:00 505206.58.83.166 1 1 00:00:00 50206.58.83.5 1 1 00:00:00 505Total 8 8 00:00:00 2,676

7.richardg.internal.webtrends.com

www.domain.com 2 2 00:00:00 157

www.hello.com 2 2 00:00:00 157www.unknown.com 2 2 00:00:00 157www.budweiser.com 6 1 00:00:07 32www.playboy.com 10 1 00:00:02 25Total 22 8 00:00:09 528

8.192.168.99.25 www.unknown.com 6 6 00:00:00 854

165.24.165.2 1 1 00:00:00 310Total 7 7 00:00:00 1,164

9.taram.internal.webtrends.com

www.comics.org 10 1 00:30:08 58

www.gamecenter.com 11 1 00:10:00 61www.match.com 10 1 00:30:08 58www.naawp.com 11 1 00:00:08 61www.ual.com 11 1 00:10:00 61www.victoriassecret.com

12 1 00:20:00 64

www.vintage-mustang.com

12 1 00:20:00 64

Total 77 7 02:00:24 427

10.192.168.99.28 www.hello.com 6 6 00:00:00 854

11.192.168.99.29 www.domain.com 6 6 00:00:00 2,133

12.192.168.99.245 www.unknown.com 4 4 00:00:00 570

13.192.168.99.269 www.domain.com 4 4 00:00:00 570

14.192.168.99.278 www.hello.com 4 4 00:00:00 570

15.192.168.99.14 165.12.158.55 1 1 00:00:00 51

206.58.83.196 1 1 00:00:00 50Total 2 2 00:00:00 101

16.philm.internal.webtrends.com

www.espn.com 16 1 00:50:00 93

www.suck.com 20 1 00:01:01 71Total 36 2 00:51:01 164

17.192.168.99.124 198.48.156.25 1 1 00:00:00 50

192.168.99.225 216.25.214.65 1 1 00:00:00 50

www.netiq.com28

Page 29: Sample Proxy Profile - Firewall

Top Users by SiteUser Site Hits Visits Time Kbytes

18.

19.192.168.99.24 205.24.125.15 1 1 00:00:00 6

20.202.98.163.28 151.68.48.127 1 1 00:00:00 40

Subtotal 553 140 03:24:15 15,562Other 37 4 00:02:12 193Total 590 144 03:26:27 15,755

Top Users by Site - Help Card

Hit - A single action on the server as it appears in the log file. Each file requested by a visitor registers as a hit. There can be several hits on each Web page. While the volume of hits reflects the amount of server traffic, it is not an accurate reflection of the number of pages viewed. Kbytes - Short for kilobytes. A kilobyte is 1024 bytes. Proxy Server - A firewall or other device that intercepts, tracks, manages, and responds to requests to application servers from client computers in a network. For example, a proxy server may forward a user's request for a Web page to a Web server. Site - A location on the World Wide Web comprising one or more related pages that are owned or managed by the same individual, company, or organization. A site may be the central access point for a group of Web pages or a group of files available for download, as with an FTP site. It is usually identified by the Web address of its central access page, the home page. User - A client computer identified by a unique IP address. Visit - A session of activity, including all hits, for one user of a Web or FTP site, or for one user of a category.

Use this page to see what sites the most active users visited most frequently during the report period.

www.netiq.com29

Page 30: Sample Proxy Profile - Firewall

Top Authenticated Users

This page shows the most active authenticated users connecting to the proxy server.

AndreaG

JasonG

JeremyN

JohnX

PeterA0

1

2

Jan 08Jan 09

Jan 10Jan 11

Jan 12Jan 13

Jan 14Jan 15

Jan 16Jan 17

Jan 18Jan 19

Jan 20Jan 21

Top Authenticated Users by Visits over Time Top Authenticated Users by Visits over Time

1 2 3 4 5 6 7 8

0

1

2

3

4

5

6

12

34

56

78

Top Authenticated Users by VisitsTop Authenticated Users by Visits

www.netiq.com30

Page 31: Sample Proxy Profile - Firewall

Top Authenticated UsersUser Hits Visits

1.AndreaG 90 6 33.33%

2.RichardG 22 3 16.66%

3.TaraM 77 3 16.66%

4.PhilM 36 2 11.11%

5.JasonG 8 1 5.55%

6.JeremyN 5 1 5.55%

7.JohnX 15 1 5.55%

8.PeterA 16 1 5.55%

Total 269 18 100.00%

Top Authenticated Users - Help Card

Authenticated User - A user who provided a username and password in order to log on to an FTP or Web site. Hit - A single action on the server as it appears in the log file. Each file requested by a visitor registers as a hit. There can be several hits on each Web page. While the volume of hits reflects the amount of server traffic, it is not an accurate reflection of the number of pages viewed. Proxy Server - A firewall or other device that intercepts, tracks, manages, and responds to requests to application servers from client computers in a network. For example, a proxy server may forward a user's request for a Web page to a Web server. Visit - A session of activity, including all hits, for one user of a Web or FTP site, or for one user of a category.

Use this page to focus on the activity of users who provided a user name and password to log into the sites they visited.

www.netiq.com31

Page 32: Sample Proxy Profile - Firewall

Top Authenticated Users by Site

This page shows the most active authenticated users and the sites they visited most frequently.

AndreaG

JasonG

JeremyN

JohnX

PeterA0

1

2

Jan 08Jan 09

Jan 10Jan 11

Jan 12Jan 13

Jan 14Jan 15

Jan 16Jan 17

Jan 18Jan 19

Jan 20Jan 21

Top Authenticated Users by Visits over Time Top Authenticated Users by Visits over Time

1 2 3 4 5 6 7 8

0

1

2

3

4

5

6

12

34

56

78

Top Authenticated Users by VisitsTop Authenticated Users by Visits

www.netiq.com32

Page 33: Sample Proxy Profile - Firewall

Top Authenticated Users by SiteUser Site Hits Visits Time Kbytes

1.AndreaG www7.cnn.com 19 3 00:00:37 118

p5.yahoo.com 2 2 00:00:00 52us.yimg.com 10 2 00:00:02 11web.zdnet.com 21 2 00:00:02 56www7.yahoo.com 12 2 00:00:06 15ads1.zdnet.com 1 1 00:00:00 2e7.zdnet.com 1 1 00:00:00 11ne1.news.com 6 1 00:01:18 47www.amazon.com 17 1 00:10:07 90www1.zdnet.com 1 1 00:00:00 1Total 90 16 00:12:12 402

2.RichardG www.domain.com 2 2 00:00:00 157

www.hello.com 2 2 00:00:00 157www.unknown.com 2 2 00:00:00 157www.budweiser.com 6 1 00:00:07 32www.playboy.com 10 1 00:00:02 25Total 22 8 00:00:09 528

3.TaraM www.comics.org 10 1 00:30:08 58

www.gamecenter.com 11 1 00:10:00 61www.match.com 10 1 00:30:08 58www.naawp.com 11 1 00:00:08 61www.ual.com 11 1 00:10:00 61www.victoriassecret.com

12 1 00:20:00 64

www.vintage-mustang.com

12 1 00:20:00 64

Total 77 7 02:00:24 427

4.PhilM www.espn.com 16 1 00:50:00 93

www.suck.com 20 1 00:01:01 71Total 36 2 00:51:01 164

5.JasonG www.deja.com 8 1 00:00:08 46

6.JeremyN www.desertpalace.co

m5 1 00:00:00 30

7.JohnX www.century21.com 15 1 00:02:01 101

8.PeterA www.playboy.com 16 1 00:00:11 57

Total 269 37 03:06:06 1,754

Top Authenticated Users by Site - Help Card

www.netiq.com33

Page 34: Sample Proxy Profile - Firewall

Top Authenticated Users by Site - Help CardAuthenticated User - A user who provided a username and password in order to log on to an FTP or Web site. Hit - A single action on the server as it appears in the log file. Each file requested by a visitor registers as a hit. There can be several hits on each Web page. While the volume of hits reflects the amount of server traffic, it is not an accurate reflection of the number of pages viewed. Kbytes - Short for kilobytes. A kilobyte is 1024 bytes. Site - A location on the World Wide Web comprising one or more related pages that are owned or managed by the same individual, company, or organization. A site may be the central access point for a group of Web pages or a group of files available for download, as with an FTP site. It is usually identified by the Web address of its central access page, the home page. User - A client computer identified by a unique IP address. Visit - A session of activity, including all hits, for one user of a Web or FTP site, or for one user of a category.

Use this information to see what sites the most active authenticated users were visiting during the report period, and how much bandwidth each user consumed while accessing each site. This will assist you in tracking the authenticated users consuming the most resources on the network. The Visits column on this table represents the number of times each user visited the listed site(s).

www.netiq.com34

Page 35: Sample Proxy Profile - Firewall

Top Core Categories

This page shows the top categories within the Core categories list.

Adult/Sexually Explicit

Drugs Alcohol &Tobacco

Gambling

Hate Speech

0

1

Jan 08Jan 09

Jan 10Jan 11

Jan 12Jan 13

Jan 14Jan 15

Jan 16Jan 17

Jan 18Jan 19

Jan 20Jan 21

Top Core Categories by Visits over TimeTop Core Categories by Visits over Time

1 2 3 4

0

1

2

12

34

Top Core Categories by VisitsTop Core Categories by Visits

Top Core CategoriesCategory Hits Visits

1.Adult/Sexually Explicit 26 2 33.33%

2.Gambling 23 2 33.33%

3.Drugs, Alcohol & Tobacco 6 1 16.66%

www.netiq.com35

Page 36: Sample Proxy Profile - Firewall

Top Core CategoriesCategory Hits Visits

4.Hate Speech 11 1 16.66%

Total 66 6 100.00%

Top Core Categories - Help Card

Category - A group of Web sites identified in the URL Categorization database for tracking purposes, according to the type of content they represent. For example, the Gambling category may contain the addresses of Web sites for online betting. Core Category - One of several specified categories of Web sites that may contain content that is objectionable or related to illegal activity. The SurfControl database used by Security Reporting Center includes five Core categories: Sexually Explicit, Violence, Hate Speech, Gambling, and Drugs/Alcohol. Hit - A single action on the server as it appears in the log file. Each file requested by a visitor registers as a hit. There can be several hits on each Web page. While the volume of hits reflects the amount of server traffic, it is not an accurate reflection of the number of pages viewed. Visit - A session of activity, including all hits, for one user of a Web or FTP site, or for one user of a category.

Use this page to see an overview of potentially sensitive Web content accessed by users in your network during the report period. Note that some ISPs and Web hosting services host several sites on one server. These sites are referred to as virtual sites. Virtual sites have at least two hostnames: the hostname of the virtual site and the hostname of the server computer. The hostname used for URL Categorization depends on how the firewall or proxy server records this information. If both are recorded, reports use the virtual hostname.

www.netiq.com36

Page 37: Sample Proxy Profile - Firewall

Top Core Category Pages

This page shows the top Web pages within the Core categories.

http://w w w .budw eiser.com/

http://w w w .casino.com/

http://w w w .desertpalace.com/

http://w w w .naaw p.com/

http://w w w .naaw p.com/creed/index.html0

1

Jan 08Jan 09

Jan 10Jan 11

Jan 12Jan 13

Jan 14Jan 15

Jan 16Jan 17

Jan 18Jan 19

Jan 20Jan 21

Top Core Category Pages by Visits over TimeTop Core Category Pages by Visits over Time

1 2 3 4 5 6

0

1

2

12

34

56

Top Core Category Pages by VisitsTop Core Category Pages by Visits

www.netiq.com37

Page 38: Sample Proxy Profile - Firewall

Top Core Category PagesPage Category Views Visits

1.http://www.playboy.com/ Adult/Sexually

Explicit2 2 28.57%

2.http://www.budweiser.com/ Drugs,

Alcohol & Tobacco

1 1 14.28%

3.http://www.casino.com/ Gambling 1 1 14.28%

4.http://www.desertpalace.com/ Gambling 1 1 14.28%

5.http://www.naawp.com/ Hate Speech 1 1 14.28%

6.http://www.naawp.com/creed/index.html

Hate Speech 1 1 14.28%

Total 7 7 100.00%

Top Core Category Pages - Help Card

Category - A group of Web sites identified in the URL Categorization database for tracking purposes, according to the type of content they represent. For example, the Gambling category may contain the addresses of Web sites for online betting. Core Category - One of several specified categories of Web sites that may contain content that is objectionable or related to illegal activity. The SurfControl database used by Security Reporting Center includes five Core categories: Sexually Explicit, Violence, Hate Speech, Gambling, and Drugs/Alcohol. Page - Potentially, any static or dynamic Web content defined as a page by a Security Reporting Center System Admin. Typically a page includes all static content, such as complete html pages. Dynamic Web content, which is created with variables and does not exist anywhere in a static form, may be considered as a page if the administrator wishes to include it in reports. View - An instance where a user accesses one Web or FTP page. Visit - A session of activity, including all hits, for one user of a Web or FTP site, or for one user of a category.

Use this page to learn what specific pages from sites in the Core categories are accessed most frequently by users in your network.

www.netiq.com38

Page 39: Sample Proxy Profile - Firewall

Core Category Visits by User

This page shows the top Core categories accessed through the proxy server and the hostnames or IP addresses of the users who accessed them.

Adult/Sexually Explicit

Drugs Alcohol &Tobacco

Gambling

Hate Speech

0

1

Jan 08Jan 09

Jan 10Jan 11

Jan 12Jan 13

Jan 14Jan 15

Jan 16Jan 17

Jan 18Jan 19

Jan 20Jan 21

Top Core Categories by Visits over Time Top Core Categories by Visits over Time

1 2 3 4

0

1

2

12

34

Top Core Categories by VisitsTop Core Categories by Visits

Core Category Visits by UserCategory User Hits Visits Time Kbytes

1.Adult/Sexually Explicit

petera.internal.webtrends.com 16 1 00:00:11 57

richardg.internal.webtrends.com

10 1 00:00:02 25

Total 26 2 00:00:13 82

www.netiq.com39

Page 40: Sample Proxy Profile - Firewall

Core Category Visits by UserCategory User Hits Visits Time Kbytes

2.Gambling jasong.internal.webtrends.com 18 1 00:00:06 98

jeremyn.internal.webtrends.com

5 1 00:00:00 30

Total 23 2 00:00:06 127

3.Drugs, Alcohol & Tobacco

richardg.internal.webtrends.com

6 1 00:00:07 32

4.Hate Speech taram.internal.webtrends.com 11 1 00:00:08 61

Total 66 6 00:00:34 302

Core Category Visits by User - Help Card

Category - A group of Web sites identified in the URL Categorization database for tracking purposes, according to the type of content they represent. For example, the Gambling category may contain the addresses of Web sites for online betting. Core Category - One of several specified categories of Web sites that may contain content that is objectionable or related to illegal activity. The SurfControl database used by Security Reporting Center includes five Core categories: Sexually Explicit, Violence, Hate Speech, Gambling, and Drugs/Alcohol. Hit - A single action on the server as it appears in the log file. Each file requested by a visitor registers as a hit. There can be several hits on each Web page. While the volume of hits reflects the amount of server traffic, it is not an accurate reflection of the number of pages viewed. Kbytes - Short for kilobytes. A kilobyte is 1024 bytes. User - A client computer identified by a unique IP address. View - An instance where a user accesses one Web or FTP page. Visit - A session of activity, including all hits, for one user of a Web or FTP site, or for one user of a category.

Use this page to see which users most frequently visited the sites in the top Core categories, resulting in their inclusion in the Top Core Categories ranking. This information can be used to help enforce policies for acceptable use of Internet resources. The Visits column in this table represents the number of times each user visited the listed site(s). Note that some ISPs and Web hosting services host several sites on one server. These sites are referred to as virtual sites. Virtual sites have at least two hostnames: the hostname of the virtual site and the hostname of the server computer. The hostname used for URL Categorization depends on how the firewall or proxy server records this information. If both are recorded, reports use the virtual hostname.

www.netiq.com40

Page 41: Sample Proxy Profile - Firewall

Users Visiting Core Categories

This page shows the most active users who accessed Core categories, and the Core categories they visited the most frequently.

1 2 3 4 5

0

1

2

12

34

5

Users Visiting Core Categories by VisitsUsers Visiting Core Categories by Visits

Users Visiting Core CategoriesUser Category Hits Visits Time Kbytes Cost

1.richardg.internal.webtrends.com

Adult/Sexually Explicit

10 1 00:00:02 25 $0.13

Drugs, Alcohol & Tobacco

6 1 00:00:07 32 $0.17

Total 16 2 00:00:09 57 $0.30

2.jasong.internal.webtrends.com

Gambling 18 1 00:00:06 98 $0.52

3.jeremyn.internal.webtrends.com

Gambling 5 1 00:00:00 30 $0.16

4.petera.internal.webtrends.com

Adult/Sexually Explicit

16 1 00:00:11 57 $0.30

taram.internal.webtrend Hate 11 1 00:00:08 61 $0.32

www.netiq.com41

Page 42: Sample Proxy Profile - Firewall

Users Visiting Core CategoriesUser Category Hits Visits Time Kbytes Cost

5. s.com SpeechOther 0 0 00:00:00 -1 $0.03Total 66 6 00:00:34 302 $1.63

Users Visiting Core Categories - Help Card

Category - A group of Web sites identified in the URL Categorization database for tracking purposes, according to the type of content they represent. For example, the Gambling category may contain the addresses of Web sites for online betting. Core Category - One of several specified categories of Web sites that may contain content that is objectionable or related to illegal activity. The SurfControl database used by Security Reporting Center includes five Core categories: Sexually Explicit, Violence, Hate Speech, Gambling, and Drugs/Alcohol. Hit - A single action on the server as it appears in the log file. Each file requested by a visitor registers as a hit. There can be several hits on each Web page. While the volume of hits reflects the amount of server traffic, it is not an accurate reflection of the number of pages viewed. Kbytes - Short for kilobytes. A kilobyte is 1024 bytes. User - A client computer identified by a unique IP address. Visit - A session of activity, including all hits, for one user of a Web or FTP site, or for one user of a category.

Use this page to focus on the most active visitors to Core categories and determine how much time and bandwidth they expended during their visits. Note that some ISPs and Web hosting services host several sites on one server. These sites are referred to as virtual sites. Virtual sites have at least two hostnames: the hostname of the virtual site and the hostname of the server computer. The hostname used for URL Categorization depends on how the firewall or proxy server records this information. If both are recorded, reports use the virtual hostname.

www.netiq.com42

Page 43: Sample Proxy Profile - Firewall

Users Visiting Sites in Core Categories

This page shows the users who most frequently visited sites within the Core categories.

1 2 3 4 5

0

1

2

12

34

5

Users Visiting Pages in Core Categories by VisitsUsers Visiting Pages in Core Categories by Visits

Users Visiting Sites in Core CategoriesUser Site Category Hits Visits Time Kbytes

1.richardg.internal.webtrends.com

www.budweiser.com

Drugs, Alcohol & Tobacco

6 1 00:00:07 32

www.playboy.com

Adult/Sexually Explicit

10 1 00:00:02 25

Total 16 2 00:00:09 57

2.jasong.internal.webtrends.com

www.casino.com

Gambling 18 1 00:00:06 98

3.jeremyn.internal.webtrends.com

www.desertpalace.com

Gambling 5 1 00:00:00 30

4.petera.internal.webtrends.com

www.playboy.com

Adult/Sexually Explicit

16 1 00:00:11 57

5.taram.internal.webtrends.com

www.naawp.com

Hate Speech

11 1 00:00:08 61

www.netiq.com43

Page 44: Sample Proxy Profile - Firewall

Users Visiting Sites in Core CategoriesUser Site Category Hits Visits Time KbytesTotal 66 6 00:00:34 302

Users Visiting Sites in Core Categories - Help Card

Category - A group of Web sites identified in the URL Categorization database for tracking purposes, according to the type of content they represent. For example, the Gambling category may contain the addresses of Web sites for online betting. Core Category - One of several specified categories of Web sites that may contain content that is objectionable or related to illegal activity. The SurfControl database used by Security Reporting Center includes five Core categories: Sexually Explicit, Violence, Hate Speech, Gambling, and Drugs/Alcohol. Hit - A single action on the server as it appears in the log file. Each file requested by a visitor registers as a hit. There can be several hits on each Web page. While the volume of hits reflects the amount of server traffic, it is not an accurate reflection of the number of pages viewed. Kbytes - Short for kilobytes. A kilobyte is 1024 bytes. Site - A location on the World Wide Web comprising one or more related pages that are owned or managed by the same individual, company, or organization. A site may be the central access point for a group of Web pages or a group of files available for download, as with an FTP site. It is usually identified by the Web address of its central access page, the home page. User - A client computer identified by a unique IP address. Visit - A session of activity, including all hits, for one user of a Web or FTP site, or for one user of a category.

Use this page to see what Core category sites each of the top users visited most frequently and how much time and bandwidth they expended while visiting those sites. Note that some ISPs and Web hosting services host several sites on one server. These sites are referred to as virtual sites. Virtual sites have at least two hostnames: the hostname of the virtual site and the hostname of the server computer. The hostname used for URL Categorization depends on how the firewall or proxy server records this information. If both are recorded, reports use the virtual hostname.

www.netiq.com44

Page 45: Sample Proxy Profile - Firewall

Users Visiting Pages in Core Categories

This page shows the users who most frequently visited pages within the Core categories.

1 2 3 4 5

0

1

2

12

34

5

Users Visiting Core Categories by VisitsUsers Visiting Core Categories by Visits

Users Visiting Pages in Core CategoriesUser Page Category Hits Visits Time Kbytes

1.richardg.internal.webtrends.com

http://www.budweis

er.com/

Drugs, Alcohol & Tobacco

1 1 00:00:00 26

http://www.playboy.

com/

Adult/Sexually Explicit

1 1 00:00:00 5

Total 2 2 00:00:00 31

2.taram.internal.webtrends.com

http://www.naawp.c

om/

Hate Speech

1 1 00:00:00 3

http://www.naawp.c

om/creed/index.html

Hate Speech

1 1 00:00:00 9

Total 2 2 00:00:00 12

jasong.internal.w http:// Gambling 1 1 00:00:00 16

www.netiq.com45

Page 46: Sample Proxy Profile - Firewall

Users Visiting Pages in Core CategoriesUser Page Category Hits Visits Time Kbytes

3. ebtrends.com www.casino.com/

4.jeremyn.internal.webtrends.com

http://www.desertpa

lace.com/

Gambling 1 1 00:00:00 4

5.petera.internal.webtrends.com

http://www.playboy.

com/

Adult/Sexually Explicit

1 1 00:00:00 5

Total 7 7 00:00:00 67

Users Visiting Pages in Core Categories - Help Card

Category - A group of Web sites identified in the URL Categorization database for tracking purposes, according to the type of content they represent. For example, the Gambling category may contain the addresses of Web sites for online betting. Core Category - One of several specified categories of Web sites that may contain content that is objectionable or related to illegal activity. The SurfControl database used by Security Reporting Center includes five Core categories: Sexually Explicit, Violence, Hate Speech, Gambling, and Drugs/Alcohol. Hit - A single action on the server as it appears in the log file. Each file requested by a visitor registers as a hit. There can be several hits on each Web page. While the volume of hits reflects the amount of server traffic, it is not an accurate reflection of the number of pages viewed. Kbytes - Short for kilobytes. A kilobyte is 1024 bytes. Page - Potentially, any static or dynamic Web content defined as a page by a Security Reporting Center System Admin. Typically a page includes all static content, such as complete html pages. Dynamic Web content, which is created with variables and does not exist anywhere in a static form, may be considered as a page if the administrator wishes to include it in reports. User - A client computer identified by a unique IP address. Visit - A session of activity, including all hits, for one user of a Web or FTP site, or for one user of a category.

Use this page to see what specific pages from the Core Categories list users visited most frequently. This information can be used to help enforce policies for the acceptable use of Internet resources. The Visits column on this table represents the number of times each user visited the listed page in the core categories.

www.netiq.com46

Page 47: Sample Proxy Profile - Firewall

Core Category Visits by Authenticated User

This page shows the top Core categories accessed through the proxy server and the authenticated users who accessed them.

1 2 3 4

0

1

2

12

34

Core Category Visits by Authenticated Users by VisitsCore Category Visits by Authenticated Users by Visits

Core Category Visits by Authenticated UserCategory User Hits Visits Time Kbytes

1.Adult/Sexually Explicit

PeterA 16 1 00:00:11 57

RichardG 10 1 00:00:02 25Total 26 2 00:00:13 82

2.Drugs, Alcohol & Tobacco

RichardG 6 1 00:00:07 32

3.Gambling JeremyN 5 1 00:00:00 30

4.Hate Speech TaraM 11 1 00:00:08 61

Total 48 5 00:00:28 205

Core Category Visits by Authenticated User - Help Card

Authenticated User - A user who provided a username and password in order to log on to an FTP or Web site. Category - A group of Web sites identified in the URL Categorization database for tracking purposes, according to the type of content they represent. For example, the Gambling category may contain the addresses of Web sites for online betting.

www.netiq.com47

Page 48: Sample Proxy Profile - Firewall

Core Category Visits by Authenticated User - Help Card Core Category - One of several specified categories of Web sites that may contain content that is objectionable or related to illegal activity. The SurfControl database used by Security Reporting Center includes five Core categories: Sexually Explicit, Violence, Hate Speech, Gambling, and Drugs/Alcohol. Hit - A single action on the server as it appears in the log file. Each file requested by a visitor registers as a hit. There can be several hits on each Web page. While the volume of hits reflects the amount of server traffic, it is not an accurate reflection of the number of pages viewed. Kbytes - Short for kilobytes. A kilobyte is 1024 bytes. User - A client computer identified by a unique IP address. Visit - A session of activity, including all hits, for one user of a Web or FTP site, or for one user of a category.

Use this page to find out what Core categories were visited by users who provided a user name and password in order to log on. Note that some ISPs and Web hosting services host several sites on one server. These sites are referred to as virtual sites. Virtual sites have at least two hostnames: the hostname of the virtual site and the hostname of the server computer. The hostname used for URL Categorization depends on how the firewall or proxy server records this information. If both are recorded, reports use the virtual hostname.

www.netiq.com48

Page 49: Sample Proxy Profile - Firewall

Authenticated Users Visiting Core Categories

This page shows the most active authenticated users connecting to Core categories, and the Core categories they visited most frequently.

1 2 3 4

0

1

2

12

34

Authenticated Users Visiting Core Categories by VisitAuthenticated Users Visiting Core Categories by Visit

Authenticated Users Visiting Core CategoriesUser Category Hits Visits Time Kbytes

1.RichardG Adult/Sexually

Explicit10 1 00:00:02 25

Drugs, Alcohol & Tobacco

6 1 00:00:07 32

Total 16 2 00:00:09 57

2.JeremyN Gambling 5 1 00:00:00 30

3.PeterA Adult/Sexually

Explicit16 1 00:00:11 57

4.TaraM Hate Speech 11 1 00:00:08 61

Total 48 5 00:00:28 205

Authenticated Users Visiting Core Categories - Help Card

Authenticated User - A user who provided a username and password in order to log on to an FTP or Web site. Category - A group of Web sites identified in the URL Categorization database for tracking purposes, according to the type of content they represent. For example, the Gambling category may contain the addresses of Web sites for online betting.

www.netiq.com49

Page 50: Sample Proxy Profile - Firewall

Authenticated Users Visiting Core Categories - Help Card Core Category - One of several specified categories of Web sites that may contain content that is objectionable or related to illegal activity. The SurfControl database used by Security Reporting Center includes five Core categories: Sexually Explicit, Violence, Hate Speech, Gambling, and Drugs/Alcohol. Hit - A single action on the server as it appears in the log file. Each file requested by a visitor registers as a hit. There can be several hits on each Web page. While the volume of hits reflects the amount of server traffic, it is not an accurate reflection of the number of pages viewed. Kbytes - Short for kilobytes. A kilobyte is 1024 bytes. User - A client computer identified by a unique IP address. Visit - A session of activity, including all hits, for one user of a Web or FTP site, or for one user of a category.

Use this page to focus on the activity of users who accessed Core categories and logged on using a user name and password. Note that some ISPs and Web hosting services host several sites on one server. These sites are referred to as virtual sites. Virtual sites have at least two hostnames: the hostname of the virtual site and the hostname of the server computer. The hostname used for URL Categorization depends on how the firewall or proxy server records this information. If both are recorded, reports use the virtual hostname.

www.netiq.com50

Page 51: Sample Proxy Profile - Firewall

Authenticated Users Visiting Sites in Core Categories

This page shows the authenticated users who most frequently visited sites within the Core categories.

1 2 3 4

0

1

2

12

34

Authenticated Users Visiting Sites in Core Categories by VisitAuthenticated Users Visiting Sites in Core Categories by Visit

Authenticated Users Visiting Sites in Core CategoriesUser Site Category Hits Visits Time Kbytes

1.RichardG www.budweiser.c

omDrugs,

Alcohol & Tobacco

6 1 00:00:07 32

www.playboy.com

Adult/Sexually Explicit

10 1 00:00:02 25

Total 16 2 00:00:09 57

2.JeremyN www.desertpalac

e.comGambling 5 1 00:00:00 30

3.PeterA www.playboy.co

mAdult/

Sexually Explicit

16 1 00:00:11 57

4.TaraM www.naawp.com Hate

Speech11 1 00:00:08 61

Total 48 5 00:00:28 205

Authenticated Users Visiting Sites in Core Categories - Help Card

Authenticated User - A user who provided a username and password in order to log on to an FTP or Web site. Category - A group of Web sites identified in the URL Categorization database for tracking

www.netiq.com51

Page 52: Sample Proxy Profile - Firewall

Authenticated Users Visiting Sites in Core Categories - Help Cardpurposes, according to the type of content they represent. For example, the Gambling category may contain the addresses of Web sites for online betting. Core Category - One of several specified categories of Web sites that may contain content that is objectionable or related to illegal activity. The SurfControl database used by Security Reporting Center includes five Core categories: Sexually Explicit, Violence, Hate Speech, Gambling, and Drugs/Alcohol. Hit - A single action on the server as it appears in the log file. Each file requested by a visitor registers as a hit. There can be several hits on each Web page. While the volume of hits reflects the amount of server traffic, it is not an accurate reflection of the number of pages viewed. Kbytes - Short for kilobytes. A kilobyte is 1024 bytes. Site - A location on the World Wide Web comprising one or more related pages that are owned or managed by the same individual, company, or organization. A site may be the central access point for a group of Web pages or a group of files available for download, as with an FTP site. It is usually identified by the Web address of its central access page, the home page. User - A client computer identified by a unique IP address. Visit - A session of activity, including all hits, for one user of a Web or FTP site, or for one user of a category.

Use this page to focus on the activity of users who accessed sites in Core categories and logged on using a user name and password. Note that some ISPs and Web hosting services host several sites on one server. These sites are referred to as virtual sites. Virtual sites have at least two hostnames: the hostname of the virtual site and the hostname of the server computer. The hostname used for URL Categorization depends on how the firewall or proxy server records this information. If both are recorded, reports use the virtual hostname.

www.netiq.com52

Page 53: Sample Proxy Profile - Firewall

Authenticated Users Visiting Pages in Core Categories

This page shows the authenticated users who most frequently visited pages within the Core categories.

1 2 3 4

0

1

2

12

34

Authenticated Users Visiting Pages in Core Categories by VisitAuthenticated Users Visiting Pages in Core Categories by Visit

Authenticated Users Visiting Pages in Core CategoriesUser Page Category Hits Visits Time Kbytes

1.RichardG http://

www.budweiser.com/

Drugs, Alcohol & Tobacco

1 1 00:00:00 26

http://www.playboy.co

m/

Adult/Sexually Explicit

1 1 00:00:00 5

Total 2 2 00:00:00 31

2.TaraM http://

www.naawp.com/Hate

Speech1 1 00:00:00 3

http://www.naawp.com/creed/index.html

Hate Speech

1 1 00:00:00 9

Total 2 2 00:00:00 12

3.JeremyN http://

www.desertpalace.com/

Gambling 1 1 00:00:00 4

4.PeterA http://

www.playboy.com/

Adult/Sexually Explicit

1 1 00:00:00 5

Total 6 6 00:00:00 51

Authenticated Users Visiting Pages in Core Categories - Help Card

www.netiq.com53

Page 54: Sample Proxy Profile - Firewall

Authenticated Users Visiting Pages in Core Categories - Help Card Authenticated User - A user who provided a username and password in order to log on to an FTP or Web site. Category - A group of Web sites identified in the URL Categorization database for tracking purposes, according to the type of content they represent. For example, the Gambling category may contain the addresses of Web sites for online betting. Core Category - One of several specified categories of Web sites that may contain content that is objectionable or related to illegal activity. The SurfControl database used by Security Reporting Center includes five Core categories: Sexually Explicit, Violence, Hate Speech, Gambling, and Drugs/Alcohol. Hit - A single action on the server as it appears in the log file. Each file requested by a visitor registers as a hit. There can be several hits on each Web page. While the volume of hits reflects the amount of server traffic, it is not an accurate reflection of the number of pages viewed. Kbytes - Short for kilobytes. A kilobyte is 1024 bytes. Page - Potentially, any static or dynamic Web content defined as a page by a Security Reporting Center System Admin. Typically a page includes all static content, such as complete html pages. Dynamic Web content, which is created with variables and does not exist anywhere in a static form, may be considered as a page if the administrator wishes to include it in reports. User - A client computer identified by a unique IP address. Visit - A session of activity, including all hits, for one user of a Web or FTP site, or for one user of a category.

Use this page to focus on the activity of users who accessed specific pages in the Core categories and logged on using a user name and password.

www.netiq.com54

Page 55: Sample Proxy Profile - Firewall

Top General Categories

This page shows the most popular Web sites within the General categories.

Computing & Internet

New s

Arts & Entertainment

Search Engines

Advertisements0

1

2

3

4

5

6

Jan 08Jan 09

Jan 10Jan 11

Jan 12Jan 13

Jan 14Jan 15

Jan 16Jan 17

Jan 18Jan 19

Jan 20Jan 21

Top General Categories Visited over TimeTop General Categories Visited over Time

1 2 3 4 5 6 7 8 9

10 11 12 13 14 15 16 17 18

0

3

6

9

12

15

18

21

24

27

30

12

34

56

78

910

1112

1314

1516

1718

Top General Categories VisitedTop General Categories Visited

www.netiq.com55

Page 56: Sample Proxy Profile - Firewall

Top General Categories Category Hits Visits

1.Computing & Internet 205 32 29.35%

2.News 33 17 15.59%

3.Reference 13 13 11.92%

4.Education 12 12 11.00%

5.Hosting Sites 12 12 11.00%

6.Arts & Entertainment 55 6 5.50%

7.Search Engines 34 5 4.58%

8.Shopping 18 2 1.83%

9.Advertisements 1 1 0.91%

10.Games 11 1 0.91%

11.Glamour & Intimate Apparel 12 1 0.91%

12.Job Search & Career Development 11 1 0.91%

13.Motor Vehicles 12 1 0.91%

14.Personals & Dating 10 1 0.91%

15.Real Estate 15 1 0.91%

16.Sports 16 1 0.91%

17.Travel 11 1 0.91%

18.Usenet News 11 1 0.91%

Total 492 109 100.00%

Top General Categories - Help Card

Category - A group of Web sites identified in the URL Categorization database for tracking purposes, according to the type of content they represent. For example, the Gambling category may contain the addresses of Web sites for online betting. General Category - One of several specified categories of Web sites containing content that is not objectionable in itself, but may detract from employee productivity. The SurfControl database used by Security Reporting Center includes 15 General categories such as News,

www.netiq.com56

Page 57: Sample Proxy Profile - Firewall

Top General Categories - Help CardShopping, Travel, and Chat. Hit - A single action on the server as it appears in the log file. Each file requested by a visitor registers as a hit. There can be several hits on each Web page. While the volume of hits reflects the amount of server traffic, it is not an accurate reflection of the number of pages viewed. Site - A location on the World Wide Web comprising one or more related pages that are owned or managed by the same individual, company, or organization. A site may be the central access point for a group of Web pages or a group of files available for download, as with an FTP site. It is usually identified by the Web address of its central access page, the home page. Visit - A session of activity, including all hits, for one user of a Web or FTP site, or for one user of a category.

Use this page to see an overview of potentially sensitive Web content accessed by users in your network during the report period. Note that some ISPs and Web hosting services host several sites on one server. These sites are referred to as virtual sites. Virtual sites have at least two hostnames: the hostname of the virtual site and the hostname of the server computer. The hostname used for URL Categorization depends on how the firewall or proxy server records this information. If both are recorded, reports use the virtual hostname.

www.netiq.com57

Page 58: Sample Proxy Profile - Firewall

Top General Category Pages

This page shows the most popular pages within the General categories.

http://w w w .alphasoftw are.com/cleanpro/index.html

http://inet1.tek.com/Gallery/camera2/

http://ne1.new s.com/

http://p5.yahoo.com/

http://p6.yahoo.com/0

1

2

Jan 08Jan 09

Jan 10Jan 11

Jan 12Jan 13

Jan 14Jan 15

Jan 16Jan 17

Jan 18Jan 19

Jan 20Jan 21

Top General Category Pages Visited over TimeTop General Category Pages Visited over Time

1 2 3 4 5 6 7 8 9 10

11 12 13 14 15 16 17 18 19 20

0

1

2

12

34

56

78

910

1112

1314

1516

1718

1920

Top General Category Pages VisitedTop General Category Pages Visited

www.netiq.com58

Page 59: Sample Proxy Profile - Firewall

Top General Category Pages Page Category Views Visits

1.http://p5.yahoo.com/ Search

Engines2 2 5.26%

2.http://www.alphasoftware.com/cleanpro/index.html

Computing & Internet

5 2 5.26%

3.http://www.suck.com/almanac/wx/pdx.shtml

Arts & Entertainment

3 2 5.26%

4.http://inet1.tek.com/Gallery/camera2/

Computing & Internet

1 1 2.63%

5.http://ne1.news.com/ Computing &

Internet1 1 2.63%

6.http://p6.yahoo.com/ Search

Engines1 1 2.63%

7.http://q9.yahoo.com/quotes Search

Engines1 1 2.63%

8.http://web.zdnet.com/ Computing &

Internet1 1 2.63%

9.http://web.zdnet.com/home/filters/maina.html

Computing & Internet

1 1 2.63%

10.http://www.alphasoftware.com/antivirus/index.html

Computing & Internet

1 1 2.63%

11.http://www.amazon.com/ Shopping 2 1 2.63%

12.http://www.amazon.com/creed/index.html

Shopping 2 1 2.63%

13.http://www.astrologers.com/ Arts &

Entertainment1 1 2.63%

14.http://www.century21.com/ Real Estate 1 1 2.63%

15.http://www.century21.com/creed/index.html

Real Estate 1 1 2.63%

16.http://www.comics.org/creed/index.html

Arts & Entertainment

1 1 2.63%

17.http://www.deja.com/ Usenet News 1 1 2.63%

18.http://www.deja.com/creed/index.html

Usenet News 1 1 2.63%

19.http://www.espn.com/ Sports 1 1 2.63%

20.http://www.espn.com/creed/index.html

Sports 1 1 2.63%

Subtotal 29 23 60.52%Other 17 15 39.47%Total 46 38 100.00%

Top General Category Pages - Help Card

www.netiq.com59

Page 60: Sample Proxy Profile - Firewall

Top General Category Pages - Help CardCategory - A group of Web sites identified in the URL Categorization database for tracking purposes, according to the type of content they represent. For example, the Gambling category may contain the addresses of Web sites for online betting. General Category - One of several specified categories of Web sites containing content that is not objectionable in itself, but may detract from employee productivity. The SurfControl database used by Security Reporting Center includes 15 General categories such as News, Shopping, Travel, and Chat. Page - Potentially, any static or dynamic Web content defined as a page by a Security Reporting Center System Admin. Typically a page includes all static content, such as complete html pages. Dynamic Web content, which is created with variables and does not exist anywhere in a static form, may be considered as a page if the administrator wishes to include it in reports. View - An instance where a user accesses one Web or FTP page. Visit - A session of activity, including all hits, for one user of a Web or FTP site, or for one user of a category.

Use this page to see which users most frequently visited pages in the top general categories, resulting in their inclusion in the Top General Categories ranking. This information can be used to help enforce policies for acceptable use of Internet resources. The Visits column in this table represents the number of times each user visited the listed site(s).

www.netiq.com60

Page 61: Sample Proxy Profile - Firewall

General Categories by User

This page shows the top General categories accessed through the proxy server and the hostnames or IP addresses of the users who accessed them.

Computing & Internet

New s

Arts & Entertainment

Search Engines

Advertisements0

1

2

3

4

5

6

Jan 08Jan 09

Jan 10Jan 11

Jan 12Jan 13

Jan 14Jan 15

Jan 16Jan 17

Jan 18Jan 19

Jan 20Jan 21

Top General Categories Visited over TimeTop General Categories Visited over Time

1 2 3 4 5 6 7 8 9 10

11 12 13 14 15 16 17 18 19 20

0

1

2

3

4

5

6

7

8

9

10

11

12

13

12

34

56

78

910

1112

1314

1516

1718

1920

Top General Categories VisitedTop General Categories Visited

www.netiq.com61

Page 62: Sample Proxy Profile - Firewall

General Categories by User Category User Hits Visits Avg. Time Kbytes

1.Computing & Internet

jasong.internal.webtrends.com 159 12 00:16:06 1,082

192.168.99.28 6 6 00:00:00 854WEBTRENDS-NT 6 6 00:00:00 429192.168.99.278 4 4 00:00:00 570andreag.internal.webtrends.com

28 2 00:01:20 114

richardg.internal.webtrends.com

2 2 00:00:00 157

Total 205 32 00:17:26 3,205

2.News 192.168.99.212 12 12 00:00:00 1,709

andreag.internal.webtrends.com

19 3 00:00:37 118

jasong.internal.webtrends.com 2 1 00:00:01 17Total 33 16 00:00:38 1,843

3.Reference 192.168.99.25 6 6 00:00:00 854

192.168.99.245 4 4 00:00:00 570richardg.internal.webtrends.com

2 2 00:00:00 157

WEBTRENDS-NT 1 1 00:00:00 71Total 13 13 00:00:00 1,652

4.Education 192.168.99.202 12 12 00:00:00 1,453

5.Hosting Sites 192.168.99.29 6 6 00:00:00 2,133

192.168.99.269 4 4 00:00:00 570richardg.internal.webtrends.com

2 2 00:00:00 157

Total 12 12 00:00:00 2,860

6.Arts & Entertainment

jasong.internal.webtrends.com 23 3 00:02:56 133

WEBTRENDS-NT 2 2 00:00:00 15philm.internal.webtrends.com 20 1 00:01:01 71taram.internal.webtrends.com 10 1 00:30:08 58Total 55 7 00:34:05 277

7.Search Engines

andreag.internal.webtrends.com

24 2 00:00:06 78

Jason 1 1 00:00:00 7jasong.internal.webtrends.com 9 1 00:00:09 53Total 34 4 00:00:15 139

8.Job Search & Career Development

jasong.internal.webtrends.com 11 2 00:00:09 61

Shopping andreag.internal.webtrends.co 18 2 00:10:07 91

www.netiq.com62

Page 63: Sample Proxy Profile - Firewall

General Categories by User Category User Hits Visits Avg. Time Kbytes

9. m

10.Usenet News jasong.internal.webtrends.com 11 2 00:00:09 61

11.Advertisements

andreag.internal.webtrends.com

1 1 00:00:00 2

12.Games taram.internal.webtrends.com 11 1 00:10:00 61

13.Glamour & Intimate Apparel

taram.internal.webtrends.com 12 1 00:20:00 64

14.Motor Vehicles

taram.internal.webtrends.com 12 1 00:20:00 64

15.Personals & Dating

taram.internal.webtrends.com 10 1 00:30:08 58

16.Real Estate johnx.internal.webtrends.com 15 1 00:02:01 101

17.Sports philm.internal.webtrends.com 16 1 00:50:00 93

18.Travel taram.internal.webtrends.com 11 1 00:10:00 61

Total 492 110 03:24:58 12,144

General Categories by User - Help Card

Category - A group of Web sites identified in the URL Categorization database for tracking purposes, according to the type of content they represent. For example, the Gambling category may contain the addresses of Web sites for online betting. General Category - One of several specified categories of Web sites containing content that is not objectionable in itself, but may detract from employee productivity. The SurfControl database used by Security Reporting Center includes 15 General categories such as News, Shopping, Travel, and Chat. Hit - A single action on the server as it appears in the log file. Each file requested by a visitor registers as a hit. There can be several hits on each Web page. While the volume of hits reflects the amount of server traffic, it is not an accurate reflection of the number of pages viewed. Kbytes - Short for kilobytes. A kilobyte is 1024 bytes. User - A client computer identified by a unique IP address. Visit - A session of activity, including all hits, for one user of a Web or FTP site, or for one user of a category.

Use this page to see which users most frequently visited the sites in the top General

www.netiq.com63

Page 64: Sample Proxy Profile - Firewall

General Categories by User - Help Cardcategories, resulting in their inclusion in the Top General Categories ranking. This information can be used to help enforce policies for acceptable use of Internet resources. The Visits column in this table represents the number of times each user visited the listed site(s). Note that some ISPs and Web hosting services host several sites on one server. These sites are referred to as virtual sites. Virtual sites have at least two hostnames: the hostname of the virtual site and the hostname of the server computer. The hostname used for URL Categorization depends on how the firewall or proxy server records this information. If both are recorded, reports use the virtual hostname.

www.netiq.com64

Page 65: Sample Proxy Profile - Firewall

Users Visiting General Categories

This page shows the users who connected to the proxy server and the General categories they visited the most frequently during the report period.

1 2 3 4 5 6 7 8

9 10 11 12 13 14 15 16

0

2

4

6

8

10

12

14

16

18

20

12

34

56

78

910

1112

1314

1516

Users Visiting General Categories by VisitsUsers Visiting General Categories by Visits

Users Visiting General Categories User Category Hits Visits Time Kbytes Cost

1.jasong.internal.webtrends.com

Computing & Internet

159 12 00:16:06 1,082 $5.84

Arts & Entertainm

ent

23 3 00:02:56 133 $0.71

Job Search & Career

Development

11 2 00:00:09 61 $0.32

Usenet News

11 2 00:00:09 61 $0.32

News 2 1 00:00:01 17 $0.09Search Engines

9 1 00:00:09 53 $0.28

www.netiq.com65

Page 66: Sample Proxy Profile - Firewall

Users Visiting General Categories User Category Hits Visits Time Kbytes Cost

Total 21 00:19:30 1,407 $7.59

2.192.168.99.202 Education 12 12 00:00:00 1,453 $7.84

3.192.168.99.212 News 12 12 00:00:00 1,709 $9.22

4.andreag.internal.webtrends.com

News 19 3 00:00:37 118 $0.63

Computing & Internet

28 2 00:01:20 114 $0.61

Search Engines

24 2 00:00:06 78 $0.42

Shopping 18 2 00:10:07 91 $0.49Advertisem

ents1 1 00:00:00 2 $0.01

Total 10 00:12:10 402 $2.17

5.WEBTRENDS-NT Computing

& Internet6 6 00:00:00 429 $2.31

Arts & Entertainm

ent

2 2 00:00:00 15 $0.08

Reference 1 1 00:00:00 71 $0.38Total 9 00:00:00 515 $2.78

6.192.168.99.25 Reference 6 6 00:00:00 854 $4.61

7.192.168.99.28 Computing

& Internet6 6 00:00:00 854 $4.61

8.192.168.99.29 Hosting

Sites6 6 00:00:00 2,133 $11.51

9.richardg.internal.webtrends.com

Computing & Internet

2 2 00:00:00 157 $0.84

Hosting Sites

2 2 00:00:00 157 $0.84

Reference 2 2 00:00:00 157 $0.84Total 6 00:00:00 471 $2.54

10.taram.internal.webtrends.com

Arts & Entertainm

ent

10 1 00:30:08 58 $0.31

Games 11 1 00:10:00 61 $0.32Glamour &

Intimate Apparel

12 1 00:20:00 64 $0.34

Motor Vehicles

12 1 00:20:00 64 $0.34

Personals & Dating

10 1 00:30:08 58 $0.31

Travel 11 1 00:10:00 61 $0.32Total 6 02:00:16 366 $1.97

www.netiq.com66

Page 67: Sample Proxy Profile - Firewall

Users Visiting General Categories User Category Hits Visits Time Kbytes Cost

11.192.168.99.245 Reference 4 4 00:00:00 570 $3.07

12.192.168.99.269 Hosting

Sites4 4 00:00:00 570 $3.07

13.192.168.99.278 Computing

& Internet4 4 00:00:00 570 $3.07

14.philm.internal.webtrends.com

Arts & Entertainm

ent

20 1 00:01:01 71 $0.38

Sports 16 1 00:50:00 93 $0.50Total 2 00:51:01 164 $0.88

15.Jason Search

Engines1 1 00:00:00 7 $0.03

16.johnx.internal.webtrends.com

Real Estate

15 1 00:02:01 101 $0.54

Other 382 -3:-23:-8 152 $12,078.50

Total 492 00:01:50 12,298 $12,144.00

Users Visiting General Categories - Help Card

Category - A group of Web sites identified in the URL Categorization database for tracking purposes, according to the type of content they represent. For example, the Gambling category may contain the addresses of Web sites for online betting. General Category - One of several specified categories of Web sites containing content that is not objectionable in itself, but may detract from employee productivity. The SurfControl database used by Security Reporting Center includes 15 General categories such as News, Shopping, Travel, and Chat. Hit - A single action on the server as it appears in the log file. Each file requested by a visitor registers as a hit. There can be several hits on each Web page. While the volume of hits reflects the amount of server traffic, it is not an accurate reflection of the number of pages viewed. Kbytes - Short for kilobytes. A kilobyte is 1024 bytes. User - A client computer identified by a unique IP address. Visit - A session of activity, including all hits, for one user of a Web or FTP site, or for one user of a category.

Use this page to focus on the most active visitors to General catgories and determine how much time and bandwidth they expended during their visits. Note that some ISPs and Web hosting services host several sites on one server. These sites are referred to as virtual sites. Virtual sites have at least two hostnames: the hostname of the virtual site and the hostname of

www.netiq.com67

Page 68: Sample Proxy Profile - Firewall

Users Visiting General Categories - Help Cardthe server computer. The hostname used for URL Categorization depends on how the firewall or proxy server records this information. If both are recorded, reports use the virtual hostname.

www.netiq.com68

Page 69: Sample Proxy Profile - Firewall

Users Visiting Sites in General Categories

This page shows the users who most frequently visited sites within the General categories during the report period.

1 2 3 4 5 6 7 8

9 10 11 12 13 14 15 16

0

2

4

6

8

10

12

14

16

18

20

22

24

12

34

56

78

910

1112

1314

1516

Users Visiting Sites in General Categories by VisitsUsers Visiting Sites in General Categories by Visits

Users Visiting Sites in General CategoriesUser Site Hits Visits Time Kbytes

1.jasong.internal.webtrends.com

www.alphasoftware.com

158 12 00:15:57 1,082

www.astrologers.com 13 2 00:02:02 98www.deja.com 11 2 00:00:09 61

www.monsterboard.com

11 2 00:00:09 61

inet1.tek.com 1 1 00:00:00 1p6.yahoo.com 1 1 00:00:00 26q9.yahoo.com 1 1 00:00:00 12us.yimg.com 1 1 00:00:00 1

www.prnewswire.com 2 1 00:00:01 17www.suck.com 10 1 00:01:03 35

www6.yahoo.com 6 1 00:00:08 14Total 215 25 00:19:29 1,407

www.netiq.com69

Page 70: Sample Proxy Profile - Firewall

Users Visiting Sites in General CategoriesUser Site Hits Visits Time Kbytes

2.andreag.internal.webtrends.com

www7.cnn.com 19 3 00:00:37 118

p5.yahoo.com 2 2 00:00:00 52us.yimg.com 10 2 00:00:02 11

web.zdnet.com 21 2 00:00:02 56www7.yahoo.com 12 2 00:00:06 15ads1.zdnet.com 1 1 00:00:00 2e7.zdnet.com 1 1 00:00:00 11ne1.news.com 6 1 00:01:18 47

www.amazon.com 17 1 00:10:07 90www1.zdnet.com 1 1 00:00:00 1

Total 90 16 00:12:12 402

3.192.168.99.202 www.test.com 12 12 00:00:00 1,453

4.192.168.99.212 www.abc.com 12 12 00:00:00 1,709

5.WEBTRENDS-NT www.egsoftware.com 6 6 00:00:00 429

www.other.com 2 2 00:00:00 15www.unknown.com 1 1 00:00:00 71

Total 9 9 00:00:00 515

6.192.168.99.25 www.unknown.com 6 6 00:00:00 854

7.192.168.99.28 www.hello.com 6 6 00:00:00 854

8.192.168.99.29 www.domain.com 6 6 00:00:00 2,133

9.richardg.internal.webtrends.com

www.domain.com 2 2 00:00:00 157

www.hello.com 2 2 00:00:00 157www.unknown.com 2 2 00:00:00 157

Total 6 6 00:00:00 471

10.taram.internal.webtrends.com

www.comics.org 10 1 00:30:08 58

www.gamecenter.com 11 1 00:10:00 61www.match.com 10 1 00:30:08 58

www.ual.com 11 1 00:10:00 61www.victoriassecret.c

om12 1 00:20:00 64

www.vintage-mustang.com

12 1 00:20:00 64

Total 66 6 02:00:16 366

11.192.168.99.245 www.unknown.com 4 4 00:00:00 570

12.192.168.99.269 www.domain.com 4 4 00:00:00 570

192.168.99.278 www.hello.com 4 4 00:00:00 570

www.netiq.com70

Page 71: Sample Proxy Profile - Firewall

Users Visiting Sites in General CategoriesUser Site Hits Visits Time Kbytes

13.

14.philm.internal.webtrends.com

www.espn.com 16 1 00:50:00 93

www.suck.com 20 1 00:01:01 71Total 36 2 00:51:01 164

15.Jason www.yahoo.com 1 1 00:00:00 7

16.johnx.internal.webtrends.com

www.century21.com 15 1 00:02:01 101

Total 492 120 03:24:59 12,144

Users Visiting Sites in General Categories - Help Card

Category - A group of Web sites identified in the URL Categorization database for tracking purposes, according to the type of content they represent. For example, the Gambling category may contain the addresses of Web sites for online betting. General Category - One of several specified categories of Web sites containing content that is not objectionable in itself, but may detract from employee productivity. The SurfControl database used by Security Reporting Center includes 15 General categories such as News, Shopping, Travel, and Chat. Hit - A single action on the server as it appears in the log file. Each file requested by a visitor registers as a hit. There can be several hits on each Web page. While the volume of hits reflects the amount of server traffic, it is not an accurate reflection of the number of pages viewed. Kbytes - Short for kilobytes. A kilobyte is 1024 bytes. Site - A location on the World Wide Web comprising one or more related pages that are owned or managed by the same individual, company, or organization. A site may be the central access point for a group of Web pages or a group of files available for download, as with an FTP site. It is usually identified by the Web address of its central access page, the home page. User - A client computer identified by a unique IP address. Visit - A session of activity, including all hits, for one user of a Web or FTP site, or for one user of a category.

Use this page to see what General category sites each of the top users visited most frequently and how much time and bandwidth they expended while visiting those sites. Note that some ISPs and Web hosting services host several sites on one server. These sites are referred to as virtual sites. Virtual sites have at least two hostnames: the hostname of the virtual site and the hostname of the server computer. The hostname used for URL Categorization depends on how the firewall or proxy server records this information. If both are recorded, reports use the virtual hostname.

www.netiq.com71

Page 72: Sample Proxy Profile - Firewall

General Category Visits by Authenticated Users

This page shows the most popular General categories accessed through the proxy server and the authenticated users who accessed them.

1 2 3 4 5 6 7 8

9 10 11 12 13 14 15 16

0

1

2

3

4

12

34

56

78

910

1112

1314

1516

General Category Visits by Authenticated Users by VisitsGeneral Category Visits by Authenticated Users by Visits

General Category Visits by Authenticated UsersCategory User Hits Visits Time Kbytes

1.Computing & Internet

AndreaG 28 2 00:01:20 114

RichardG 2 2 00:00:00 157Total 30 4 00:01:20 271

2.News AndreaG 19 3 00:00:37 118

3.Arts & Entertainment

PhilM 20 1 00:01:01 71

TaraM 10 1 00:30:08 58Total 30 2 00:31:09 129

4.Hosting Sites

RichardG 2 2 00:00:00 157

Reference RichardG 2 2 00:00:00 157

www.netiq.com72

Page 73: Sample Proxy Profile - Firewall

General Category Visits by Authenticated UsersCategory User Hits Visits Time Kbytes

5.

6.Search Engines

AndreaG 24 2 00:00:06 78

7.Shopping AndreaG 18 2 00:10:07 91

8.Advertisements

AndreaG 1 1 00:00:00 2

9.Games TaraM 11 1 00:10:00 61

10.Glamour & Intimate Apparel

TaraM 12 1 00:20:00 64

11.Motor Vehicles

TaraM 12 1 00:20:00 64

12.Personals & Dating

TaraM 10 1 00:30:08 58

13.Real Estate JohnX 15 1 00:02:01 101

14.Sports PhilM 16 1 00:50:00 93

15.Travel TaraM 11 1 00:10:00 61

16.Usenet News

JasonG 8 1 00:00:08 46

Total 221 26 03:05:36 1,550

General Category Visits by Authenticated Users - Help Card

Authenticated User - A user who provided a username and password in order to log on to an FTP or Web site. Category - A group of Web sites identified in the URL Categorization database for tracking purposes, according to the type of content they represent. For example, the Gambling category may contain the addresses of Web sites for online betting. General Category - One of several specified categories of Web sites containing content that is not objectionable in itself, but may detract from employee productivity. The SurfControl database used by Security Reporting Center includes 15 General categories such as News, Shopping, Travel, and Chat. Hit - A single action on the server as it appears in the log file. Each file requested by a visitor registers as a hit. There can be several hits on each Web page. While the volume of hits reflects the amount of server traffic, it is not an accurate reflection of the number of pages viewed. Kbytes - Short for kilobytes. A kilobyte is 1024 bytes. User - A client computer identified by a unique IP address.

www.netiq.com73

Page 74: Sample Proxy Profile - Firewall

General Category Visits by Authenticated Users - Help Card Visit - A session of activity, including all hits, for one user of a Web or FTP site, or for one user of a category.

Use this page to find out what General categories were visited by users who provided a user name and password in order to log on. Note that some ISPs and Web hosting services host several sites on one server. These sites are referred to as virtual sites. Virtual sites have at least two hostnames: the hostname of the virtual site and the hostname of the server computer. The hostname used for URL Categorization depends on how the firewall or proxy server records this information. If both are recorded, reports use the virtual hostname.

www.netiq.com74

Page 75: Sample Proxy Profile - Firewall

Authenticated Users Visiting General Categories

This page shows the most active authenticated users and the General categories they visited the most frequently during the report period.

1 2 3 4 5 6

0

1

2

3

4

5

6

7

8

9

10

12

34

56

Authenticated Users Visiting General Categories by VisitsAuthenticated Users Visiting General Categories by Visits

Authenticated Users Visiting General CategoriesUser Category Hits Visits Time Kbytes

1.AndreaG News 19 3 00:00:37 118

Computing & Internet

28 2 00:01:20 114

Search Engines

24 2 00:00:06 78

Shopping 18 2 00:10:07 91Advertisem

ents1 1 00:00:00 2

Total 90 10 00:12:10 402

2.RichardG Computing

& Internet2 2 00:00:00 157

Hosting Sites

2 2 00:00:00 157

www.netiq.com75

Page 76: Sample Proxy Profile - Firewall

Authenticated Users Visiting General CategoriesUser Category Hits Visits Time Kbytes

Reference 2 2 00:00:00 157Total 6 6 00:00:00 471

3.TaraM Arts &

Entertainment

10 1 00:30:08 58

Games 11 1 00:10:00 61Glamour &

Intimate Apparel

12 1 00:20:00 64

Motor Vehicles

12 1 00:20:00 64

Personals & Dating

10 1 00:30:08 58

Travel 11 1 00:10:00 61Total 66 6 02:00:16 366

4.PhilM Arts &

Entertainment

20 1 00:01:01 71

Sports 16 1 00:50:00 93Total 36 2 00:51:01 164

5.JasonG Usenet

News8 1 00:00:08 46

6.JohnX Real Estate 15 1 00:02:01 101

Total 221 26 03:05:36 1,550

Authenticated Users Visiting General Categories - Help Card

Authenticated User - A user who provided a username and password in order to log on to an FTP or Web site. Category - A group of Web sites identified in the URL Categorization database for tracking purposes, according to the type of content they represent. For example, the Gambling category may contain the addresses of Web sites for online betting. General Category - One of several specified categories of Web sites containing content that is not objectionable in itself, but may detract from employee productivity. The SurfControl database used by Security Reporting Center includes 15 General categories such as News, Shopping, Travel, and Chat. Hit - A single action on the server as it appears in the log file. Each file requested by a visitor registers as a hit. There can be several hits on each Web page. While the volume of hits reflects the amount of server traffic, it is not an accurate reflection of the number of pages viewed. Kbytes - Short for kilobytes. A kilobyte is 1024 bytes. User - A client computer identified by a unique IP address.

www.netiq.com76

Page 77: Sample Proxy Profile - Firewall

Authenticated Users Visiting General Categories - Help Card Visit - A session of activity, including all hits, for one user of a Web or FTP site, or for one user of a category.

Use this page to focus on the activity of users who accessed General categories and logged on using a user name and password. Note that some ISPs and Web hosting services host several sites on one server. These sites are referred to as virtual sites. Virtual sites have at least two hostnames: the hostname of the virtual site and the hostname of the server computer. The hostname used for URL Categorization depends on how the firewall or proxy server records this information. If both are recorded, reports use the virtual hostname.

www.netiq.com77

Page 78: Sample Proxy Profile - Firewall

Authenticated Users Visiting Sites in General Categories

This page shows the authenticated users who most frequently visited sites within the General categories during the report period.

1 2 3 4 5 6

0

2

4

6

8

10

12

14

16

12

34

56

Authenticated Users Visiting Sites in General Categories by VisitAuthenticated Users Visiting Sites in General Categories by Visit

Authenticated Users Visiting Sites in General CategoriesUser Site Hits Visits Time Kbytes

1.AndreaG www7.cnn.com 19 3 00:00:37 118

p5.yahoo.com 2 2 00:00:00 52us.yimg.com 10 2 00:00:02 11

web.zdnet.com 21 2 00:00:02 56www7.yahoo.com 12 2 00:00:06 15ads1.zdnet.com 1 1 00:00:00 2e7.zdnet.com 1 1 00:00:00 11ne1.news.com 6 1 00:01:18 47

www.amazon.com 17 1 00:10:07 90www1.zdnet.com 1 1 00:00:00 1

Total 90 16 00:12:12 402

2.RichardG www.domain.com 2 2 00:00:00 157

www.netiq.com78

Page 79: Sample Proxy Profile - Firewall

Authenticated Users Visiting Sites in General CategoriesUser Site Hits Visits Time Kbytes

www.hello.com 2 2 00:00:00 157www.unknown.com 2 2 00:00:00 157

Total 6 6 00:00:00 471

3.TaraM www.comics.org 10 1 00:30:08 58

www.gamecenter.com 11 1 00:10:00 61www.match.com 10 1 00:30:08 58

www.ual.com 11 1 00:10:00 61www.victoriassecret.com 12 1 00:20:00 64

www.vintage-mustang.com 12 1 00:20:00 64Total 66 6 02:00:16 366

4.PhilM www.espn.com 16 1 00:50:00 93

www.suck.com 20 1 00:01:01 71Total 36 2 00:51:01 164

5.JasonG www.deja.com 8 1 00:00:08 46

6.JohnX www.century21.com 15 1 00:02:01 101

Total 221 32 03:05:38 1,550

Authenticated Users Visiting Sites in General Categories - Help Card

Authenticated User - A user who provided a username and password in order to log on to an FTP or Web site. Category - A group of Web sites identified in the URL Categorization database for tracking purposes, according to the type of content they represent. For example, the Gambling category may contain the addresses of Web sites for online betting. General Category - One of several specified categories of Web sites containing content that is not objectionable in itself, but may detract from employee productivity. The SurfControl database used by Security Reporting Center includes 15 General categories such as News, Shopping, Travel, and Chat. Hit - A single action on the server as it appears in the log file. Each file requested by a visitor registers as a hit. There can be several hits on each Web page. While the volume of hits reflects the amount of server traffic, it is not an accurate reflection of the number of pages viewed. Kbytes - Short for kilobytes. A kilobyte is 1024 bytes. Site - A location on the World Wide Web comprising one or more related pages that are owned or managed by the same individual, company, or organization. A site may be the central access point for a group of Web pages or a group of files available for download, as with an FTP site. It is usually identified by the Web address of its central access page, the home page. User - A client computer identified by a unique IP address.

www.netiq.com79

Page 80: Sample Proxy Profile - Firewall

Authenticated Users Visiting Sites in General Categories - Help Card Visit - A session of activity, including all hits, for one user of a Web or FTP site, or for one user of a category.

Use this page to focus on the activity of users who accessed sites in Core categories and logged on using a user name and password. Note that some ISPs and Web hosting services host several sites on one server. These sites are referred to as virtual sites. Virtual sites have at least two hostnames: the hostname of the virtual site and the hostname of the server computer. The hostname used for URL Categorization depends on how the firewall or proxy server records this information. If both are recorded, reports use the virtual hostname.

www.netiq.com80

Page 81: Sample Proxy Profile - Firewall

Top-Level Domain Types

This page breaks down Web and FTP activity by the top-level domains visited.

Commercial

Organization

0

2

4

6

8

10

12

Jan 08Jan 09

Jan 10Jan 11

Jan 12Jan 13

Jan 14Jan 15

Jan 16Jan 17

Jan 18Jan 19

Jan 20Jan 21

Top-Level Domain Types by Visits over TimeTop-Level Domain Types by Visits over Time

1 2

0

20

40

60

80

100

12

Top-Level Domain Types By VisitsTop-Level Domain Types By Visits

Top-Level Domain TypesTop-Level Domain Type Hits Visits

1.Commercial 559 98 98.99%

2.Organization 10 1 1.01%

Total 569 99 100.00%

www.netiq.com81

Page 82: Sample Proxy Profile - Firewall

Top-Level Domain Types - Help Card

Hit - A single action on the server as it appears in the log file. Each file requested by a visitor registers as a hit. There can be several hits on each Web page. While the volume of hits reflects the amount of server traffic, it is not an accurate reflection of the number of pages viewed. Top-Level Domain - One of a limited number of domain types identified by a suffix such as .gov, .org, or .com. The list of types included in reports is defined by a Security Reporting Center System Admin using the Domains panel. Visit - A session of activity, including all hits, for one user of a Web or FTP site, or for one user of a category.

Use this page to see which top-level domains, such as commercial (.com) or government (.gov), your users visited most frequently. These top-level domains may include a variety of file extensions and can be specified by a Security Reporting Center System Admin.

www.netiq.com82

Page 83: Sample Proxy Profile - Firewall

Top Countries

This page identifies the countries most frequently accessed through the proxy server.

0

2

4

6

8

10

12

Jan 08Jan 09

Jan 10Jan 11

Jan 12Jan 13

Jan 14Jan 15

Jan 16Jan 17

Jan 18Jan 19

Jan 20Jan 21

Top Countries by Visits over TimeTop Countries by Visits over Time

1

0

40

80

1

Top Countries By VisitsTop Countries By Visits

Country BreakdownCountry Visits

1.United States (US) 98 100.00%

Total 98 100.00%

Top Countries - Help Card

www.netiq.com83

Page 84: Sample Proxy Profile - Firewall

Top Countries - Help Card Visit - A session of activity, including all hits, for one user of a Web or FTP site, or for one user of a category.

Use this page to see a breakdown of the countries associated with the sites your users access. The country is determined by the Web site's domain name suffix. The registered address for a domain name often differs from the physical location of the site developer. This is frequently the case with large multi-national organizations, or with sites hosted by an ISP.

www.netiq.com84

Page 85: Sample Proxy Profile - Firewall

Activity Summary

This page gives an overview of proxy server activity, comparing the level of activity on weekdays and weekends.

Activity SummaryAverage Number of Users per Day on Weekdays 7Average Number of Hits per Day on Weekdays 46Average Number of Users per Weekend 15Average Number of Hits per Weekend 62Most Active Day of the Week TuesdayLeast Active Day of the Week MondayMost Active Date Tuesday, January 08, 2002Number of Hits on Most Active Day 154Least Active Date Monday, January 21, 2002Number of Hits on Least Active Day 17

Activity Summary - Help Card

Day - The day of the week. If the report period is longer than one week, and there are, for example, two Mondays, the value shown for Monday includes the combined total of both Mondays. Hit - A single action on the server as it appears in the log file. Each file requested by a visitor registers as a hit. There can be several hits on each Web page. While the volume of hits reflects the amount of server traffic, it is not an accurate reflection of the number of pages viewed. Server - A computer that provides resources and services for other (client) computers that connect to it. A server can be accessed via a network or intranet, or via the Internet. User - A client computer identified by a unique IP address.

Use this page to track issues related to productivity and network traffic planning. For example, determining when the proxy server is busiest may help you decide when to schedule server downtime. Average Number of Users and Hits on Weekdays shows the averages for weekdays. Average Number of Users and Hits for Weekends groups Saturday and Sunday together.

www.netiq.com85

Page 86: Sample Proxy Profile - Firewall

Kbytes over Time

This page shows how much bandwidth was consumed by incoming and outgoing requests through the proxy server during the report period and provides an overview of your site's activity.

0

200

400

600

800

1,000

1,200

1,400

1,600

1,800

2,000

Jan 08Jan 09

Jan 10Jan 11

Jan 12Jan 13

Jan 14Jan 15

Jan 16Jan 17

Jan 18Jan 19

Jan 20Jan 21

Kbytes over TimeKbytes over Time

Kbytes over TimeTime Interval KbytesJanuary 8 1,136 7.20%January 9 528 3.35%January 10 809 5.13%January 11 1,553 9.85%January 12 1,466 9.30%January 13 908 5.76%January 14 1,437 9.12%January 15 1,054 6.68%January 16 1,778 11.28%January 17 810 5.14%January 18 810 5.14%January 19 1,396 8.86%January 20 2,013 12.77%January 21 59 0.37%Total 15,757 100.00%

Kbytes over Time - Help Card

Bandwidth - A measure in kilobytes of the amount of data transmitted or received. Day - The day of the week. If the report period is longer than one week, and there are, for

www.netiq.com86

Page 87: Sample Proxy Profile - Firewall

Kbytes over Time - Help Cardexample, two Mondays, the value shown for Monday includes the combined total of both Mondays. Hour - The hour of the day. If the report period is longer than one day, the value shown for a given hour includes the combined total during that hour for all days in the report period. Kbytes - Short for kilobytes. A kilobyte is 1024 bytes.

Depending on the time interval selected in the current report, this page shows bandwidth in kbytes consumed during each unit of time.

www.netiq.com87

Page 88: Sample Proxy Profile - Firewall

Activity by Day of the Week

This page shows the activity for each day of the week during the report period.

0

2

4

6

8

10

12

14

16

18

20

22

SundayMonday

TuesdayWednesday

ThursdayFriday

Saturday

Visits By Day of WeekVisits By Day of Week

Activity by Day of the WeekDay Hits VisitsMonday 38 10 12.65%Tuesday 216 22 27.84%Wednesday 108 15 18.98%Thursday 52 14 17.72%Friday 52 18 22.78%Total Weekdays 466 79 100.00%Saturday 50 16 53.33%Sunday 74 14 46.66%Total Weekend 124 30 100.00%

Activity by Day of the Week - Help Card

Day - The day of the week. If the report period is longer than one week, and there are, for example, two Mondays, the value shown for Monday includes the combined total of both Mondays. Hit - A single action on the server as it appears in the log file. Each file requested by a visitor registers as a hit. There can be several hits on each Web page. While the volume of hits reflects the amount of server traffic, it is not an accurate reflection of the number of pages viewed. Visit - A session of activity, including all hits, for one user of a Web or FTP site, or for one user of a category.

www.netiq.com88

Page 89: Sample Proxy Profile - Firewall

Activity by Day of the Week - Help Card

Use this page to see how many hits and visits were logged on each day of the week, including Saturday and Sunday.

www.netiq.com89

Page 90: Sample Proxy Profile - Firewall

Activity by Hour of the Day

This page shows the most and the least active hour of the day based on visits.

0

1

2

3

4

5

6

7

8

9

10

11

12

34

56

78

910

1112

1314

1516

1718

1920

2122

2324

Visits By Hour of DayVisits By Hour of Day

Activity by Hour of the DayHour Hits Visits08:00-08:59 10 10 13.88%09:00-09:59 1 1 1.38%10:00-10:59 78 10 13.88%11:00-11:59 58 11 15.27%12:00-12:59 5 5 6.94%13:00-13:59 12 8 11.11%14:00-14:59 11 10 13.88%15:00-15:59 73 11 15.27%16:00-16:59 125 6 8.33%Totals for Work Hours (8:00am-5:00pm) 373 72 100.00%17:00-17:59 109 7 18.91%18:00-18:59 51 11 29.73%19:00-19:59 3 3 8.10%20:00-20:59 0 0 0.00%21:00-21:59 0 0 0.00%22:00-22:59 0 0 0.00%23:00-23:59 0 0 0.00%00:00-00:59 0 0 0.00%01:00-01:59 1 1 2.70%02:00-02:59 0 0 0.00%03:00-03:59 0 0 0.00%04:00-04:59 1 1 2.70%05:00-05:59 6 6 16.21%

www.netiq.com90

Page 91: Sample Proxy Profile - Firewall

Activity by Hour of the DayHour Hits Visits06:00-06:59 6 4 10.81%07:00-07:59 40 4 10.81%Totals for After Hours (5:01pm-7:59am) 217 37 100.00%

Activity by Hour of the Day Summary (Visits)Most Active Hour of the Day 18:00-18:59Least Active Hour of the Day 00:00-00:59

Activity by Hour of the Day - Help Card

Hit - A single action on the server as it appears in the log file. Each file requested by a visitor registers as a hit. There can be several hits on each Web page. While the volume of hits reflects the amount of server traffic, it is not an accurate reflection of the number of pages viewed. Hour - The hour of the day. If the report period is longer than one day, the value shown for a given hour includes the combined total during that hour for all days in the report period. Visit - A session of activity, including all hits, for one user of a Web or FTP site, or for one user of a category. Work Hours - The hours during the working day, as defined by a Security Reporting Center System Admin.

Use this page to determine the distribution of hits and visits around the clock during the report period.

www.netiq.com91

Page 92: Sample Proxy Profile - Firewall

Proxy Cache

This page shows performance data for the proxy server cache.

0

20

40

60

80

100

120

140

160

Jan 08Jan 09

Jan 10Jan 11

Jan 12Jan 13

Jan 14Jan 15

Jan 16Jan 17

Jan 18Jan 19

Jan 20Jan 21

Proxy Cache by Hits over TimeProxy Cache by Hits over Time

1

0

200

400

600

1

Proxy Cache by HitsProxy Cache by Hits

Proxy CacheStatus Hits Kbytes

1.From the Internet 590 100.00% 15,755

Total 590 100.00% 15,755

Proxy Cache - Help Card

www.netiq.com92

Page 93: Sample Proxy Profile - Firewall

Proxy Cache - Help Card Hit - A single action on the server as it appears in the log file. Each file requested by a visitor registers as a hit. There can be several hits on each Web page. While the volume of hits reflects the amount of server traffic, it is not an accurate reflection of the number of pages viewed. Kbytes - Short for kilobytes. A kilobyte is 1024 bytes. Proxy Server - A firewall or other device that intercepts, tracks, manages, and responds to requests to application servers from client computers in a network. For example, a proxy server may forward a user's request for a Web page to a Web server.

Use this page to track cache performance by determining the proportion of hits that returned each status type.

www.netiq.com93

Page 94: Sample Proxy Profile - Firewall

Proxy Cache Details

This page shows detailed performance data for the proxy server cache.

1

0

200

400

600

1

Proxy Cache Details by HitsProxy Cache Details by Hits

Proxy Cache DetailsStatus Hits Kbytes

1.Detailed status not available 590 100.00% 15,755

Total 590 100.00% 15,755

Proxy Cache Details - Help Card

Hit - A single action on the server as it appears in the log file. Each file requested by a visitor registers as a hit. There can be several hits on each Web page. While the volume of hits reflects the amount of server traffic, it is not an accurate reflection of the number of pages viewed. Kbytes - Short for kilobytes. A kilobyte is 1024 bytes. Proxy Server - A firewall or other device that intercepts, tracks, manages, and responds to requests to application servers from client computers in a network. For example, a proxy server may forward a user's request for a Web page to a Web server.

Use this page to track cache performance in detail by determining the proportion of hits that returned each status type.

www.netiq.com94

Page 95: Sample Proxy Profile - Firewall

Client Errors

This page identifies the type of errors returned by clients that accessed the proxy server.

1

0

1

2

1

Client Errors by HitsClient Errors by Hits

Client ErrorsError Hits

1.404 Page or File Not Found 1 100.00%

Total 1 100.00%

Client Errors - Help Card

Client - A computer or user that requests access to resources provided by another computer, called a server. The information in the Client column can be an IP address, a domain name, a user name, or an authenticated user name. Error - A problem encountered by a client computer when trying to access resources on the World Wide Web. Hit - A single action on the server as it appears in the log file. Each file requested by a visitor registers as a hit. There can be several hits on each Web page. While the volume of hits reflects the amount of server traffic, it is not an accurate reflection of the number of pages viewed.

When a client accesses the proxy server, the server sometimes returns errors that it classifies as client errors. This information can be useful when troubleshooting problems your users encounter when they access sites outside the firewall. It can also help your partners track down problems with their Web sites.

www.netiq.com95

Page 96: Sample Proxy Profile - Firewall

Top Browsers

This page shows the most popular Web browsers used when connecting to your proxy server.

0

2

4

6

8

10

12

14

Jan 08Jan 09

Jan 10Jan 11

Jan 12Jan 13

Jan 14Jan 15

Jan 16Jan 17

Jan 18Jan 19

Jan 20Jan 21

Top Browsers by Visits over TimeTop Browsers by Visits over Time

1

0

40

80

1

Top Browsers by VisitsTop Browsers by Visits

Top BrowsersBrowser Hits Visits

1.Others 590 109 100.00%

Total 590 109 100.00%

Top Browsers - Help Card

www.netiq.com96

Page 97: Sample Proxy Profile - Firewall

Top Browsers - Help Card Browser - A program used to locate and view HTML documents, for example Microsoft Internet Explorer or Netscape Navigator. Hit - A single action on the server as it appears in the log file. Each file requested by a visitor registers as a hit. There can be several hits on each Web page. While the volume of hits reflects the amount of server traffic, it is not an accurate reflection of the number of pages viewed. Proxy Server - A firewall or other device that intercepts, tracks, manages, and responds to requests to application servers from client computers in a network. For example, a proxy server may forward a user's request for a Web page to a Web server. Visit - A session of activity, including all hits, for one user of a Web or FTP site, or for one user of a category.

Tracking browser types can help ensure that users on your internal network are using licensed Web browsers in the latest version. If the report shows the browser type "Others," your firewall or proxy server does not log information about browser type.

www.netiq.com97

Page 98: Sample Proxy Profile - Firewall

Top Search Engines

This page shows which search engines were accessed most frequently through the proxy server.

1

0

1

2

1

Top Search Engines by SearchesTop Search Engines by Searches

Top Search EnginesEngines Searches

1.Yahoo 1 100.00%

Total 1 100.00%

Top Search Engines - Help Card

Proxy Server - A firewall or other device that intercepts, tracks, manages, and responds to requests to application servers from client computers in a network. For example, a proxy server may forward a user's request for a Web page to a Web server. Search Engine - A program such as Yahoo or Google that searches the World Wide Web and locates sites and pages by subject, keyword, or any other search criteria.

Use this page to see which search engines are most popular with users in your network.

www.netiq.com98

Page 99: Sample Proxy Profile - Firewall

Top Search Keywords

This page shows which keywords were used when accessing search engines.

1

0

1

2

1

Top Search Keywords by SearchesTop Search Keywords by Searches

Top Search KeywordsKeywords Searches

1.sex 1 100.00%

Total 1 100.00%

Top Search Keywords - Help Card

Search Engine - A program such as Yahoo or Google that searches the World Wide Web and locates sites and pages by subject, keyword, or any other search criteria.

Tracking the search keywords implemented by users in your netork gives insight into the type of content they searched for.

www.netiq.com99

Page 100: Sample Proxy Profile - Firewall

Top Platforms

This page shows the operating systems most used by the visitors to your server.

0

2

4

6

8

10

12

14

Jan 08Jan 09

Jan 10Jan 11

Jan 12Jan 13

Jan 14Jan 15

Jan 16Jan 17

Jan 18Jan 19

Jan 20Jan 21

Top Platforms by Visits over TimeTop Platforms by Visits over Time

1

0

40

80

1

Top Platforms by VisitsTop Platforms by Visits

Top PlatformsPlatform Hits Visits

1.Others 590 109 100.00%

Total 590 109 100.00%

Top Platforms - Help Card

www.netiq.com100

Page 101: Sample Proxy Profile - Firewall

Top Platforms - Help Card Hit - A single action on the server as it appears in the log file. Each file requested by a visitor registers as a hit. There can be several hits on each Web page. While the volume of hits reflects the amount of server traffic, it is not an accurate reflection of the number of pages viewed. Platform - The operating system, for example Microsoft Windows NT, that a client uses when accessing a server. Visit - A session of activity, including all hits, for one user of a Web or FTP site, or for one user of a category.

Tracking top platforms can help ensure that users in your organization are using operating systems for which they are licensed. If the report shows the platform as "Other," your firewall or proxy server does not log information about operating systems.

www.netiq.com101

Page 102: Sample Proxy Profile - Firewall

Analytical Statistics

This page reports on the amount of memory that Security Reporting Center uses in its internal tables.This shows number of entries in the table as Count, the size of text for that table in bytes as Text and the amount of memory used by an actvity data in bytes as Data.

Analytical StatisticsTable Count Text DataDetailedProxyStatus 1 29 416SummaryProxyStatus 1 17 416TopAuthUsers 0 0 0TopAuthUsersCore 0 0 0TopAuthUsersGen 0 0 0TopBandwidth 1 1 416TopBrowsers 1 6 320TopClientErrors 1 26 264TopCoreDocs 0 0 0TopCountries 1 18 320TopDocuments 44 1,396 11,812TopDownloads 2 96 556TopExplorer 0 0 0TopExtensions 9 50 3,404TopGenDocs 35 1,663 9,436TopHours 24 264 7,092TopNetscape 0 0 0TopPlatforms 1 6 320TopSearchEngines 1 5 264TopSearchKeywords 1 3 264TopServerErrors 0 0 0TopSuffixes 2 22 612TopUsers 24 440 9,832TopUsersCore 5 147 2,184TopUsersGen 16 300 7,192TopVisitedCoreCategories 0 0 0TopVisitedGenCategories 0 0 0TopVisitedSites 0 0 0TopWeekdays 7 21 2,240Total 177 4,510 57,360

Analytical Statistics - Help Card

Count - The number of items in the table. Data - The amount of memory, in bytes, used by activity data and information about sites accessed for the table. This value does not include the memory used by text strings.

www.netiq.com102

Page 103: Sample Proxy Profile - Firewall

Analytical Statistics - Help Card Table - The Security Reporting Center table being analyzed. Text - The amount of memory, in bytes, used by the text for the table.

Use this page to troubleshoot performance problems by determining which report tables consume the largest amount of memory.

www.netiq.com103

Page 104: Sample Proxy Profile - Firewall

This report was generated by NetIQ Monday, March 22, 2004 - 03:55:18

NetIQ is a registered trademark of NetIQ Corporation.Other trademarks are the property of their respective owners.

www.netiq.com104