Skip to main content

Reports Overview

When you need to see what is happening on your network, which rules are hitting and more in real-time, Reportspage is the first place that you should view. It provides you many interactive charts helpful for analysing the traffic and security risks on your network.

All reports have their predefined charts. You'll be provided with the charts relevant to the report you're on.

Start with the big picture, drill-down to details#

Sensei's rich reporting allows you both to see the overall network activity in a birds-eye view, and if you want to inspect in detail, you can filter any chart item and focus on to details.

Reporting criteria#

To customize your reports, you can select the reporting criteria on the top right hand-side.

Reporting Metric#

You can select the metrics used to create the reports. Do you want to see how many sessions are created, or how many packets are transmitted, or the number of bytes transferred? You can select which information you want to see here. Available Reporting Metrics are:

  1. Session: Number of connections / transactions.

  2. Packet: Number of packets.

  3. Volume: Number of bytes.

Reporting Time Interval#

You can define a time interval for your report. Available Time Interval options are :

  • Last 30 minutes

  • Last 6 hours

  • Last 12 hours

  • Last 24 hours

  • Last 72 hours

  • Last week

Refresh Time#

This is the auto-refresh interval for the reports to automatically refresh with new data. The interval options on Cloud Portal are 1 minute, 5 minutes, and 15 minutes, 30 minutes and 1 hour.

How to Use Generic Filter#

  1. To apply a filter to the report view, select one of the chart panes.

For example, if you're on Connections tab, you can try App Categories Breakdown.

  1. Hover your mouse over the filtering type on the right sight of the chart pane. This will display Filter and Exclude buttons.

For example, hover your mouse over Secure Web Browsing.

Adding Filter

Figure 1. Adding Filter

  1. Click either Filter or Exclude button. This will apply your filter to the current report page.

For example, click Filter button.

Connections filtered out for Application Category = Secure Web Browsing

Figure 2. Connections filtered out for Application Category = Secure Web Browsing

You can apply more than one filter to the report view and see the filtering/exclude parameters on the top of the reporting page.

Connections filtered out for Application Category = Secure Web Browsing and Remote Hosts!=updates.sunnyvalley.io

Figure 3. Connections filtered out for Application Category = Secure Web Browsing and Remote Hosts!=updates.sunnyvalley.io

Report Charts#

Due to the nature of the job, Sensei creates a vast amount of data and creates meaningful graphics based on them. Each Sub-Module has its own chart setup.

You can hover your mouse over the filtering type on any of the charts to filter out the reporting data on Cloud Portal.

Filtering will be automatically applied to all the charts as is.

Connection Report Charts#

  • App Categories Breakdown
  • Apps Breakdown
  • Top Local Hosts
  • Top Remote Hosts

Connections Report View On Cloud Portal

Figure 4. Connections Report View

  • Top Remote Ports
  • Top Locale Serving Ports
  • Egress New Connections by App Over Time
  • Eggress New Connections by Source Over Time

Egress Connections Report On Cloud

Figure 5. Egress Connections Report

  • Unique Local Hosts
  • New Connections & Unique Remote Hosts
  • Egress New Connections Heatmap
  • Table of Remote Hosts

Top Connection Ports & Hosts Report On Cloud

Figure 6. Top Connection Ports & Hosts Report

  • Top Eggress Users
  • Top Ingress Users
  • Interfaces & Vlans
  • Policies

Threats Report Charts#

  • Top Detected Threats
  • Top Blocked Threats
  • Threats Detected and Allowed
  • Top Blocked Hosts
  • Top Detected Hosts
  • Top Blocked Users
  • Top Detected Users
  • Top Threat Destinations
  • Interfaces & Vlans
  • Policies

Threats Report View On Cloud

Figure 7. Threats Report View

Blocks Report Charts#

  • Blocked Local Hosts and Reasons
  • Top Blocks
  • Blocked Conversations Heatmap
  • Blocked Local Hosts Over Time
  • Interfaces & Vlans
  • Top Eggress Users
  • Top Ingress Users
  • Policies

Blocks Report View On Cloud

Figure 8. Blocks Report View

Web Report Charts#

  • HTTP Transactions by Source Over Time
  • Top Talkers Heatmap
  • Top Categories
  • Top Request Methods
  • Top HTTP Versions
  • Top HTTP Response Codes
  • Top Web Ports
  • Top Devices
  • Top OS
  • Top User Agents
  • Policies
  • Interface & Vlans

Web Report View On Cloud

Figure 9. Web Report View

DNS Report Charts#

  • DNS Transactions Heatmap
  • DNS Queries Distribution
  • DNS Query Types Tag Cloud
  • DNS Response Codes Tag Cloud
  • Policies
  • Interface & Vlans

DNS Report View On Cloud

Figure 10. DNS Report View

TLS Report Charts#

  • Top Talkers Heatmap
  • Web Categories Breakdown
  • Top TLS Session Creators Over Time
  • Destination Ports
  • Top TLS Servers Over Time
  • Policies
  • Interface & Vlans

TLS Report View On Cloud

Figure 11. TLS Report View