WatchGuard Firebox System 7.0 User Guide

Chapter 14: Generating Reports of Network ActivityDenied Authentication DetailA detailed list of failures to authenticate, sorted bytime. The fields are Date, Time, Host, and User.Consolidated sectionsNetwork StatisticsA summary of statistics on one or more log files forall devices being monitored.Time Summary – Packet FilteredA table, and optionally a graph, of all acceptedconnections distributed along user-definedintervals and sorted by time. If you choose theentire log file or specific time parameters, thedefault time interval is daily. Otherwise, the timeinterval is based on your selection.Host Summary – Packet FilteredA table, and optionally a graph, of internal andexternal hosts passing packet-filtered traffic, sortedeither by bytes transferred or number ofconnections.Service SummaryA table, and optionally a graph, of traffic for allservices sorted by connection count.Session Summary – Packet FilteredA table, and optionally a graph, of the topincoming and outgoing sessions, sorted either bybyte count or number of connections. The format ofthe session is: client -> server : service. If theconnection is proxied, the service is represented inall capital letters. If the connection is packetfiltered, Historical Reports attempts to resolve theserver port to a table to represent the service name.If resolution fails, Historical Reports displays theport number.250 WatchGuard Firebox System