|
The LogVision™ product provides over eighty (80) reports right out-of-the-box as well as allows creation of dynamic reports based on custom queries by the customer.
The screen on the right shows the ‘Reports’ sub-tree with menus for custom query and standard reports. LogVision™ currently support reporting for Cisco PIX and CheckPoint Firewalls. Additional support is provided for SNORT And ISS Intrusion detection solutions.
Some examples of the firewall reports available are:
- Daily log view of Accept packets
- Deny log view of Accept packets
- Summary log view of Accepted and Denied packets
- General Firewall Statistics
Top 10 category Reports such as:
- Top 10 FTP sites
- Top 10 POP3 sites
- Top 10 SMTP sites
- Top 10 Telnet connections
- Top 10 Web connections
- Top 10 Inbound VPN connections
- Top 10 Outbound VPN connections
- Top 10 Denial-of-service attack source
- Top 10 Denial-of-service targets
- Top 10 Port scan source
Log Reports with Custom Query
LogVision™ ‘Custom Query Report’ represents one of the most powerful features in the industry. The custom query feature allows customers the complete freedom to create their own customized reports with twenty-two (22) variables. Customer can choose a specific firewall at a site, with start and end date/time, specify source of destination IP addresses and select standard or custom services, to create customized reports from the log data stored in the database.
|