Network Activity Reports

To search for and generate reports on information about connections on log sources, use Network Activity reports.

Choose Reports > Network Activity > report-name from the navigation menu, where report-name is any one of the following:

Network Activity Reports
Report Description More information
Accepted Connections Use the Accepted Connections screen to search for and generate a report on IP connections that were accepted by a log source. Accepted Connections Reports
Active FW Connections Use the Active FW Connections screen to search for and generate a report on current active sessions from the selected firewall log sources. Active FW Connections Reports
Active VPN Connections Use the Active VPN Connections screen to search for and generate a report on current active sessions through Check Point Interface, Cisco VPN 3000, Nortel Connectivity, and RADIUS Acct Client log sources. Active VPN Connections Reports
Application Distribution Use the Application Distribution screen to search for and generate a report on information about messages, grouped by application ports, that were accepted by a device. Application Distribution Reports
Denied Connections Use the Denied Connections screen to search for and generate a report on connections denied by the selected firewall log sources. Denied Connections Reports
FTP Connections Use the FTP Connections screen to search for and generate a report on syslog messages related to FTP traffic through the selected firewall log sources. FTP Connections Reports
VPN Access Use the VPN Access screen to search for and generate a report on the number of VPN connections that the log source either completed or denied. VPN Access Reports
VPN Sessions Use the VPN Sessions screen to search for and generate a report on data about separate invocations of sessions on log sources during a specified time interval. VPN Sessions Reports
VPN Top Lists Use the VPN Top Lists screen to search for and generate a report on the top users and IP addresses and statistics. VPN Top Lists Reports
Web Cache Activity Use the Web Cache Activity screen to search for and generate a report on locally stored web information served during a specified time interval. Web Cache Activity Reports
Web Surfing Activity Use the Web Surfing Activity screen to search for and generate a report on web information served during a specified time interval. Web Surfing Activity Reports
DHCP Activity Use the DHCP Activity screen to search for and generate a report on events related to all DHCP activity. DHCP Activity Reports
DHCP Granted/Renewed Activity Use the DHCP Granted/Renewed Activity screen to search for and generate a report on events related to DHCP requests that were granted or renewed. DHCP Granted/Renewed Activity Reports
DHCP Denied Activity Use the DHCP Denied Activity screen to search for and generate a report on events related to DHCP requests that were denied. DHCP Denied Activity Reports
NAT64 Activity Use the NAT64 Activity screen to search for and generate a report on each binding when sessions are built and destroyed. NAT64 Activity Reports

Preparing a Real-time Report includes the common options that you specify for all Real-Time Reports.

Optional filter operators are different for each Network Activity report, and explained in their respective sections.

For information on saving the generated report, see Formats for Saving a Generated Report.

  • Accepted Connections Reports
    To search for and generate a report on IP connections that were accepted by selected firewall log sources during a specified time interval, use the Accepted Connections Real-Time Report.
  • Active FW Connections Reports
    To search for and generate a report on current active sessions through selected Cisco PIX Firewall log sources, use the Active FW Connections Real-Time Report.
  • Active VPN Connections Reports
    To search for and generate a report on current active sessions through selected VPN and RADIUS log sources, use the Active VPN Connections Real-Time Report.
  • Application Distribution Reports
    To search for and generate a report that summarizes accepted traffic by application ports through selected firewall log sources during a specified time interval, use the Application Distribution Real-Time Report.
  • Denied Connections Reports
    To search for and generate a report on denied connections by selected firewall log sources during a specified time interval, use the Denied Connections Real-Time Report.
  • FTP Connections Reports
    To search for and generate a report on all syslog messages related to FTP traffic through the selected firewall device during a specified time interval, use the FTP Connections Real-Time Report.
  • VPN Access Reports
    To search for and generate reports on the VPN connections that the selected log sources either completed or denied during a specified time interval, use the VPN Access Real-Time Report.
  • VPN Sessions Reports
    To search for and generate a report on data about VPN sessions (including initiation and conclusion times) on selected log sources during a specified time interval, use the VPN Sessions Real-Time Report.
  • VPN Top Lists Reports
    To search for and generate a report on the top users, IP addresses, and other statistics, use the VPN Top Lists Real-Time Report.
  • Web Cache Activity Reports
    To search for and generate a report on all URLs accessed through proxy or cache servers on specified log sources during a specified time interval, use the Web Cache Activity Real-Time Report.
  • Web Surfing Activity Reports
    To search for and generate a report on all URLs accessed via firewalls or web servers on selected log sources during a specified time interval, use the Web Surfing Activity Real-Time Report.
  • DHCP Activity Report
    To search for and generate a report on events related to all DHCP activity, use the DHCP Activity Real-Time Report.
  • DHCP Granted/Renewed Activity Reports
    To search for and generate a report on events related to DHCP requests that were granted or renewed, use the DHCP Granted/Renewed Activity Real-Time Report.
  • DHCP Denied Activity Report
    To search for and generate a report on events related to DHCP requests that were denied, use the DHCP Denied Activity Real-Time Report.
  • NAT64 Activity Reports
    To search for and generate a report on each binding when sessions are built and destroyed, use the NAT64 Activity Real-Time Report.