WatchGuard Firebox System 7.0 User Guide

Report Sections and Consolidated SectionsFirebox StatisticsA summary of statistics on one or more log files fora single Firebox.Authentication DetailA detailed list of authenticated users sorted byconnection time. Fields include: authenticated user,host, start date of authenticated session, start timeof authenticated session, end time of authenticatedsession, and duration of session.Time Summary – Packet FilteredA table, and optionally a graph, of all acceptedconnections distributed along user-definedintervals and sorted by time. If you choose theentire log file or specific time parameters, thedefault time interval is daily. Otherwise, the timeinterval is based on your selection.Host Summary – Packet FilteredA table, and optionally a graph, of internal andexternal hosts passing packet-filtered trafficthrough the Firebox sorted either by bytestransferred or number of connections.Service SummaryA table, and optionally a graph, of traffic for eachservice sorted by connection count.Session Summary – Packet FilteredA table, and optionally a graph, of the topincoming and outgoing sessions, sorted either bybyte count or number of connections. The format ofthe session is: client -> server : service. If theconnection is proxied, the service is represented inall capital letters. If the connection is packetfiltered, Historical Reports attempts to resolve theserver port to a table to represent the service name.If resolution fails, Historical Reports displays theport number.User Guide 247