8e6 Technologies ER HL/SL manual

® E nterp rise R epo r ter EV ALUA TION GUIDE Models: ER HL/SL Software V ersion: 5.0.00 Document V ersion: 01.07.09[...]

ii 8 E 6 T ECHNOLOGIES , E NTERPRISE R EPORTER E VALUATION G UIDE E NTERPRISE R EPORTER E VALUATION G UIDE © 2009 8e6 T echnologies All rights reserved. Prin ted in the United S tates of America Local: 714.28 2.61 1 1 • Domestic U.S.: 1.8 88.786.7999 • International: +1.714.282.61 1 1 This document may not, in whole or in part, be copied, phot[...]

8 E 6 T ECHNOLOGIES , E NTERPRISE R EPORTER E VALUATION G UIDE iii C ONTENT S 8 E 6 E NTERPRISE R EPORTER E VALUATION G UIDE ............. ............................... 1 Overview. ............................................. ................................................................ ......... ... 1 Note to Evaluators. ....................[...]

C ONTENTS iv 8 E 6 T ECHNOLOGIES , E NTERPRISE R EPORTER E VALUATION G UIDE Create a Custom Report for a specific user. ............................... ............................... 22 How to use the Custom R eport Wizard . ................. ................... ................ ................... .......... 22 Generate a new Custom Report .. ...[...]

8 E 6 E NTERPRISE R EPORTER E VALUATION G UIDE O VERVIEW 8 E 6 T ECHNOLOGIES , E NTERPRISE R EPORTER E VALUATION G UIDE 1 8 E 6 E NTERPRISE R EPORTER E VALUATION G UIDE Overview Thank you for choosing to re view 8e6 T echnologies’ Enterprise Reporter . The Enterprise Reporter help s administrators manage internal W eb-based threats by documenting[...]

I NSTALL THE E NTERPRISE R EPORTER N OTE TO E VALUATORS 2 8 E 6 T ECHNOLOGIES , E NTERPRISE R EPORTER E VALUATION G UIDE I NST ALL THE E NTERPRISE R EPORTER T o install the app liance, configure the box and to test reporting is o perational please refer to the step-by-step instructions fou nd in the Enterprise Reporter Quick St art Guide provided i[...]

C ONFIGURE , T EST THE E NTERPRISE R EPORTER U NDERSTAND THE MOST COMMO N AND USEFUL FEATURES 8 E 6 T ECHNOLOGIES , E NTERPRISE R EPORTER E VALUATION G UIDE 3 C ONFIGURE , T EST THE E NTERPRISE R EPORTER Underst and the most common and useful features One of the advant ages of a hardware a ppliance, in addition to its comp atibility and extremely l[...]

C ONFIGURE , T EST THE E NTERPRISE R EPORTER U SE CUSTOM C ATEGORY G ROUPS TO NARROW YOUR SEAR CH 4 8 E 6 T ECHNOLOGIES , E NTERPRISE R EPORTER E VALUATION G UIDE Use custom Category Group s to narrow your search Prior to running any report s, there are a few recommended configuration step s that create a more customized experience for the evaluato[...]

C ONFIGUR E , T EST THE E NTERPRISE R EPORTER U SE CU STOM C ATEGORY G ROUPS TO NARRO W YOUR SEARCH 8 E 6 T ECHNOLOGIES , E NTERPRISE R EPORTER E VALUATION G UIDE 5 Group Definitions frame The Group Definitions fra me displays to the right in the Category Groupings window . In this frame you define a category group by specifying wh ich categories w[...]

C ONFIGURE , T EST THE E NTERPRISE R EPORTER U SE CUSTOM U SER G ROUPS TO NARROW YOUR SEARCH 6 8 E 6 T ECHNOLOGIES , E NTERPRISE R EPORTER E VALUATION G UIDE Use custom User Group s to narrow your search The next step is to create user group s, which are customized groupings of users that reside on the organization’s network. For example, most en[...]

C ONFIGURE , T EST THE E NTERPRISE R EPORTER U SE CUSTOM U SER G ROU PS TO NARROW YOUR SEARCH 8 E 6 T ECHNOLOGIES , E NTERPRISE R EPORTER E VALUATION G UIDE 7 Group Definitions frame The Group Definitions frame displays to t he right in the User Groupings window . In this frame you can view members of a user group, and can define a user group by sp[...]

C ONFIGURE , T EST THE E NTERPRISE R EPORTER U SE CUSTOM U SER G ROUPS TO NARROW YOUR SEARCH 8 8 E 6 T ECHNOLOGIES , E NTERPRISE R EPORTER E VALUATION G UIDE • Please Enter IP Range - This frame is used for including use rs based on a range of IP addresses. For example, you migh t have one range of IP addresses for sales, and anothe r for admin. [...]

C ONFIGURE , T EST THE E NTERPRISE R EPORTER U SE E NTERPRISE R EPORTER TO CONDUCT AN INVESTIGATION 8 E 6 T ECHNOLOGIES , E NTERPRISE R EPORTER E VALUATION G UIDE 9 Use Enterprise Reporter to conduct an investigation Once custom category group s and user group s have been created , administrators can begin running their first report s. In most case[...]

C ONFIGURE , T EST THE E NTERPRISE R EPORTER U SE E NTERPRISE R EPORTER C ANNED R EPORTS 10 8 E 6 T ECHNOLOGIES , E NTERPRISE R EPORTER E VALUATION G UIDE Use Enterprise Reporter Canned Report s As previously stated, th e first thing the adm inistrator will see when logging into the Enterprise Reporter is a dashboard of graphical reports called “[...]

C ONFIGURE , T EST THE E NTERPRISE R EPORTER U SE E NTERPRISE R EPORTER C ANNED R EPORTS 8 E 6 T ECHNOLOGIES , E NTERPRISE R EPORTER E VALUATION G UIDE 11 How to generate a Canned Report T o generate a canned report: 1. Go to the navigation p anel and click Canned Report s to display yes terday’s T op 20 (Internet Filtering) Ca tegories by Page C[...]

C ONFIGURE , T EST THE E NTERPRISE R EPORTER U SE E NTERPRISE R EPORTER C ANNED R EPORTS 12 8 E 6 T ECHNOLOGIES , E NTERPRISE R EPORTER E VALUATION G UIDE Sample Bar Chart Canned Report Sample Pie Chart Canne d Report The header of the ge nerated canned report includes the date range, Report T ype, and criteria Det ails. The body of the first p age[...]

C ONFIGURE , T EST THE E NTERPRISE R EPORTER U SE E NTERPRISE R EPORTER D RILL D OWN R EPORTS 8 E 6 T ECHNOLOGIES , E NTERPRISE R EPORTER E VALUATION G UIDE 13 The body of the following page (s) of the report includes Count columns and corre- sponding totals. The Grand T otal and Count display at the end of the report. NOTE : See ‘Summary Drill D[...]

C ONFIGURE , T EST THE E NTERPRISE R EPORTER U SE E NTERPRISE R EPORTER D RILL D OWN R EPORTS 14 8 E 6 T ECHNOLOGIES , E NTERPRISE R EPORTER E VALUATION G UIDE How to generate a Summary Drill Down Report T o generate a summary drill down report: 1. Go to the navigation p anel and click Drill Down Reports to displa y (by default) today’ s Categori[...]

C ONFIGURE , T EST THE E NTERPRISE R EPORTER U SE E NTERPRISE R EPORTER D RILL D OWN R EPORTS 8 E 6 T ECHNOLOGIES , E NTERPRISE R EPORTER E VALUATION G UIDE 15 3. Use the tools in the righ t panel to create the desired drill down view . NOTE : See ‘Summary Drill Down Repo rt navigation’ for information on using the reporting elements described [...]

C ONFIGURE , T EST THE E NTERPRISE R EPORTER U SE E NTERPRISE R EPORTER D RILL D OWN R EPORTS 16 8 E 6 T ECHNOLOGIES , E NTERPRISE R EPORTER E VALUATION G UIDE Count columns Columns for specified “item count s” displa y in the body of all drill down report views. The column for the current report type doe s not display and therefore cannot be s[...]

C ONFIGURE , T EST THE E NTERPRISE R EPORTER U SE E NTERPRISE R EPORTER D RILL D OWN R EPORTS 8 E 6 T ECHNOLOGIES , E NTERPRISE R EPORTER E VALUATION G UIDE 17 However , if an advertisement or banner ad (an object on the page) is actu ally a page from a nother site, this item would not be classified as an object but as a page, since it comes from a[...]

C ONFIGURE , T EST THE E NTERPRISE R EPORTER U SE E NTERPRISE R EPORTER D RILL D OWN R EPORTS 18 8 E 6 T ECHNOLOGIES , E NTERPRISE R EPORTER E VALUATION G UIDE • in the Record navigation field, click an y of the four arrow buttons to advance forward or backward through the list of records. In the order in which they display in the Record field, c[...]

C ONFIGURE , T EST THE E NTERPRISE R EPORTER U SE E NTERPRISE R EPORTER D RILL D OWN R EPORTS 8 E 6 T ECHNOLOGIES , E NTERPRISE R EPORTER E VALUATION G UIDE 19 • Filter Action - the Filter Action column displays the type of filter action used by the R3000 in creating the record : "Allowed", "Blocked", "W arn Blocked"[...]

C ONFIGURE , T EST THE E NTERPRISE R EPORTER U SE E NTERPRISE R EPORTER D RILL D OWN R EPORTS 20 8 E 6 T ECHNOLOGIES , E NTERPRISE R EPORTER E VALUATION G UIDE Evaluation steps For the purpose of this evaluation, follow these step s to witness how the 8e6 Enter- prise Reporter is best-in-class in ter ms of the extent of detailed page and object inf[...]

C ONFIGURE , T EST THE E NTERPRISE R EPORTER U SE E NTERPRISE R EPORTER D RILL D OWN R EPORTS 8 E 6 T ECHNOLOGIES , E NTERPRISE R EPORTER E VALUATION G UIDE 21 Click the URL link to launch the actual W eb site viewed by the user to verify the content that was accessed. S tep 4: Sort by “Content T ype” Sort by the column labeled “Content T ype[...]

C ONFIGURE , T EST THE E NTERPRISE R EPORTER C REATE A C USTOM R EPORT FOR A S PECIFIC U SER 22 8 E 6 T ECHNOLOGIES , E NTERPRISE R EPORTER E VALUATION G UIDE Create a Custom Report for a specific user After reviewing the d etail drill down report, if the ad ministrator is confident that an individual has violated the Internet Accept able Use Polic[...]

C ONFIGUR E , T EST THE E NTERPRISE R EPORTER C REATE A C US TOM R EPORT FO R A SPECIFIC USER 8 E 6 T ECHNOLOGIES , E NTERPRISE R EPORTER E VALUATION G UIDE 23 • At the From Time field, sp ecify the start of the time range by making a selec- tion from any of the pull- down menus for the hour (1-12), minu te (00-59), or AM or PM. • At the To T i[...]

C ONFIGURE , T EST THE E NTERPRISE R EPORTER C REATE A C USTOM R EPORT FOR A S PECIFIC U SER 24 8 E 6 T ECHNOLOGIES , E NTERPRISE R EPORTER E VALUATION G UIDE NOTE : As the report i s generating, a windo w displa ys on the screen providin g status on which stage of the report process is underway . When completely generated, the specific user report[...]

C ONFIGUR E , T EST THE E NTERPRISE R EPORTER C REATE A C US TOM R EPORT FO R A SPECIFIC USER 8 E 6 T ECHNOLOGIES , E NTERPRISE R EPORTER E VALUATION G UIDE 25 Save a Det ail Custom Report 1. Click the Save Report button to open the Save Custom Re port pop-up box: Save Custom Report option (Detail report) 2. In the Save Name field, enter a name for[...]

C ONFIGURE , T EST THE E NTERPRISE R EPORTER C REATE A C USTOM R EPORT FOR A S PECIFIC U SER 26 8 E 6 T ECHNOLOGIES , E NTERPRISE R EPORTER E VALUATION G UIDE add—a check mark in the checkbox. By ent ering a ch eck mark in this checkbox, activity on machines not assigned to specific end us ers will not be included in report views. Changing this s[...]

C ONFIGUR E , T EST THE E NTERPRISE R EPORTER C REATE A C US TOM R EPORT FO R A SPECIFIC USER 8 E 6 T ECHNOLOGIES , E NTERPRISE R EPORTER E VALUATION G UIDE 27 Schedule a report to run Once a report view has b een saved, it can be scheduled to run at a designated time. T o schedule a report to run: 1. Go to the Settings menu in the navigat ion p an[...]

C ONFIGURE , T EST THE E NTERPRISE R EPORTER C REATE A C USTOM R EPORT FOR A S PECIFIC U SER 28 8 E 6 T ECHNOLOGIES , E NTERPRISE R EPORTER E VALUATION G UIDE 4. Select the Report to Run from the pull-down menu. 5. Select the frequency When to Run from the pull-down menu (“Daily”, “Wee kly”, or “Monthly”). If Weekly , specify the Day of[...]

C ONFIGURE , T EST THE E NTERPRISE R EPORTER A PPENDIX A: S AMPLES OF C OMMONLY U SED R EPORTS 8 E 6 T ECHNOLOGIES , E NTERPRISE R EPORTER E VALUATION G UIDE 29 Appendix A: Samples of Commonly Used Report s Though this Evaluation Guide is primarily designed to lead the evaluator through the process of an investigation, there are m any other useful [...]

C ONFIGURE , T EST THE E NTERPRISE R EPORTER A PPENDIX A: S AMPLES OF C OMMONLY U SED R EPORTS 30 8 E 6 T ECHNOLOGIES , E NTERPRISE R EPORTER E VALUATION G UIDE Report format For each report, the header of the reports cont ain the following information: • Sort Order: Page Count, descendi ng • From: / To : today’ s date displays • the name o[...]

C ONFIGURE , T EST THE E NTERPRISE R EPORTER A PPENDIX A: S AMPLES OF C OMMONLY U SED R EPORTS 8 E 6 T ECHNOLOGIES , E NTERPRISE R EPORTER E VALUATION G UIDE 31 Sample Report 2: “T op 20 Sites by User/Site” This report will document the top 20 sites visited for every user in the organization. This is a useful tool in monitoring the hi gh level [...]

C ONFIGURE , T EST THE E NTERPRISE R EPORTER A PPENDIX A: S AMPLES OF C OMMONLY U SED R EPORTS 32 8 E 6 T ECHNOLOGIES , E NTERPRISE R EPORTER E VALUATION G UIDE Sample Report 3: “B y Category/User/Site” This is an example of a triple break repor t that shows all activity on the network, broken out by category , then user , and then site. This i[...]

C ONFIGUR E , T EST THE E NTERPRISE R EPORTER A PPENDIX B: E XPORT AND S AVE S UMMARY R EPORTS 8 E 6 T ECHNOLOGIES , E NTERPRISE R EPORTER E VALUATION G UIDE 33 Appendix B: Export and Save Summary Report s The Enterprise Reporter has a variety of different reportin g options. In a fashion similar to the S pecific User Report creation process descri[...]

C ONFIGURE , T EST THE E NTERPRISE R EPORTER A PPENDIX B: E XPORT AND S AVE S UMMARY R EPORTS 34 8 E 6 T ECHNOLOGIES , E NTERPRISE R EPORTER E VALUATION G UIDE S tep 3: Export a Summary Drill Down Report 1. Click the Export Report button to open the Export Drill Down Repo rt pop-up box: Export Drill Down Report option (Summary report) NOTE : Inform[...]

C ONFIGUR E , T EST THE E NTERPRISE R EPORTER A PPENDIX B: E XPORT AND S AVE S UMMARY R EPORTS 8 E 6 T ECHNOLOGIES , E NTERPRISE R EPORTER E VALUATION G UIDE 35 How to save a Summary Drill Down Report 1. Click the Save Report button to open the Save Custom Re port pop-up box: Save Custom Report option (Summary report) 2. In the Save Name field, ent[...]

C ONFIGURE , T EST THE E NTERPRISE R EPORTER A PPENDIX B: E XPORT AND S AVE S UMMARY R EPORTS 36 8 E 6 T ECHNOLOGIES , E NTERPRISE R EPORTER E VALUATION G UIDE 5. Choose the break type, output type and format: • Break type - available selections are based on the type of report generated. There are no break types avail able for specific user repor[...]

C ONFIGUR E , T EST THE E NTERPRISE R EPORTER A PPENDIX B: E XPORT AND S AVE S UMMARY R EPORTS 8 E 6 T ECHNOLOGIES , E NTERPRISE R EPORTER E VALUATION G UIDE 37 Other Summary Report tools Set Result Limit 1. Click the Set Result Limit button to open the Set Re sult Limit pop-up box: Set Result Limit option (Summary report only) 2. Indicate the Resu[...]

C ONFIGURE , T EST THE E NTERPRISE R EPORTER A PPENDIX B: E XPORT AND S AVE S UMMARY R EPORTS 38 8 E 6 T ECHNOLOGIES , E NTERPRISE R EPORTER E VALUATION G UIDE Week", “Last Weekend", “Current W eek", “Last Month”. Report s can be run for any data saved in the ER Serve r ’s memory . • T oday - this option generates the rep[...]

C ONFIGUR E , T EST THE E NTERPRISE R EPORTER A PPENDIX B: E XPORT AND S AVE S UMMARY R EPORTS 8 E 6 T ECHNOLOGIES , E NTERPRISE R EPORTER E VALUATION G UIDE 39 NOTE : The Default T op Value entry in the Defa ult Options w indow is acce ssible via Default Options in the Settings menu. See the Default Optio ns sub-section in Chapter 2: Customizing t[...]

C ONFIGURE , T EST THE E NTERPRISE R EPORTER A PPENDIX B: E XPORT AND S AVE S UMMARY R EPORTS 40 8 E 6 T ECHNOLOGIES , E NTERPRISE R EPORTER E VALUATION G UIDE NOTES : For pie or bar chart selection s, “PDF” displays grayed out since this is the only output for mat available for these re port types. Informatio n on report f ormats can be f ound[...]

C ONFIGUR E , T EST THE E NTERPRISE R EPORTER A PPENDIX B: E XPORT AND S AVE S UMMARY R EPORTS 8 E 6 T ECHNOLOGIES , E NTERPRISE R EPORTER E VALUATION G UIDE 41 Methods for exporting a Drill Down Report A drill down report view can be emailed or viewed in a specified output format via the Export Drill Do wn Report option. Email option The email opt[...]

C ONFIGURE , T EST THE E NTERPRISE R EPORTER A PPENDIX B: E XPORT AND S AVE S UMMARY R EPORTS 42 8 E 6 T ECHNOLOGIES , E NTERPRISE R EPORTER E VALUATION G UIDE 4. Click E-mail to send the report to the de signated recipient(s). As a result of this action, the Email Report pop-up box no w displays information to indica te the report is being generat[...]

C ONFIGUR E , T EST THE E NTERPRISE R EPORTER A PPENDIX B: E XPORT AND S AVE S UMMARY R EPORTS 8 E 6 T ECHNOLOGIES , E NTERPRISE R EPORTER E VALUATION G UIDE 43 V iew and print tools In the browser window cont aining the report, the too ls available via the toolba r let you perform some of the following actions o n the open report file: File: • S[...]

C ONFIGURE , T EST THE E NTERPRISE R EPORTER A PPENDIX B: E XPORT AND S AVE S UMMARY R EPORTS 44 8 E 6 T ECHNOLOGIES , E NTERPRISE R EPORTER E VALUATION G UIDE PDF This is a sample of the Categories rep ort in the PDF format, saved with a .pdf file extension: Categories report, PDF format Examples of other report format s are provided in the Enterp[...]