Embed Size (px)
Citation preview
web security | data security | email security © 2009 Websense, Inc. All rights reserved.
v7.5 Jump Start Part 4: Using Reports to Strengthen Filtering Policies
Webinar January 2011
Webinar Presenter
Title: Support Specialist
Accomplishments:– 7 years supporting Websense
products
Qualifications:– Technical Support Mentor
– Product Trainer
2
Greg Didier
Goals and Objectives
Look at various settings affecting reports
Examine Today and History pages
Decide when to use
– Presentation reports
– Investigative reports
Forensic concept reporting
– Identify security threats and eliminate loss
Delegated and self reporting
Best practice tips
3
Agenda
How to generate, schedule, and navigate thru reports
– Maximizing Your Return Using Investigative and Presentation Reports v7• December 2008 Webinar
Settings can affect reporting data
4
Settings Affecting Reports
Explore TRITON –Web Security Settings tab– Filtering
– Logging• Selective logging
– Risk class
– User Identification
– Scanning
– Hybrid
– Alerts
– Network Agent
– Reporting
Demonstration
5
Settings Affecting Reports
Explore Log Server Configuration utility
– Directory service updates
– Visits vs. hits• Changing requires new database
– Consolidation• Changing requires new database
• Scanning activity not consolidated
• Interval settings
Demonstration
6
Settings Affecting Reports
Explore TRITON –Web Security Main tab
– Today and History page• Customize charts
• Up to 4 charts allowed
– Delegated Administration• Report settings
Demonstration
7
Two reporting features are available
– Presentation reports
– Investigative reports
Which report do I use?
Generating Reports
8
Reporting
Presentation Reports
– Examine available templates• Set Favorites
– Custom reports• Include or exclude specific details
– Scheduling reports• Send reports to recipients you choose
Demonstration
Best practice
– Use favorites
– Save custom reports
– Scheduled daily reports to ensure logging occurs as expected
9
Reporting
Investigative Reports
– Examine standard reports• Customize reports
– Scheduling• Automatic report generation
– Understand drilling for data
Demonstration
Best practice
– Know where to drill
– Start at a high level• Then isolate too the specific threat/loss
– Risk Class
10
Recap - Generating Reports
Use reports to:
– Reassess your filtering policies• Actions
• Recategorize URLs
– Identify security threats and productivity loss
Make reports work for you
– Identify, save, and schedule good reports
Run reports routinely
– Websense software can stop spyware from calling out, by your job is to identify infections and take corrective action.
11
TIPS & Additional Info
Schedule a report daily to confirm logging activity
Save popular reports
Use Help > Explain This Page
Reports show only users who accessed the Internet
Full URL Logging logs 2 or 3 times more data
Saved scheduled reports consume disk space
– C:\Program Files\Websense\ReportingOutput
Know which computers are not filtered
Recategorize URLs to block specific sites
Recategorize URLs to not log specific sites
12
TIPS & Additional Info
Investigative reports:
– Take advantage of the Full Screen option
– Use Modify Reports to select relevant columns
– Drilling down
Presentation reports:
– Managers and executives love the charts
NOTE: Generating reports, using TRITON – Web Security manager, on the V-Series appliance
– For demonstration and small companies
– Medium and larger companies, install TRITON – Web Security manager on a server
13
TIPS & Additional Info
Investigative Reports Quick Start guide
Maximizing Your Return Using Investigative and Presentation Reports v7
14
Support Online Resources
Knowledge Base– Search or browse the knowledge base for documentation, downloads,
top knowledge base articles, and solutions specific to your product.
Support Forums– Share questions, offer solutions and suggestions with experienced
Websense Customers regarding product Best Practices, Deployment, Installation, Configuration, and other product topics.
Tech Alerts– Subscribe to receive product specific alerts that automatically notify you
anytime Websense issues new releases, critical hot-fixes, or other technical information.
• ask.websense.com– Create and manage support service requests using our online portal.
Customer Training Options
To find Websense classes offered by Authorized Training Partners in your area, visit:http://www.websense.com/findaclass
Websense Training Partners also offer classes online and onsite at your location.
For more information, please send email to:
Webinar Announcement
17
Title:
Exploring DC Agent In Depth
Date:
February 16th, 2011
Time:
8:30 AM PDT (GMT -8)
How to register:
http://www.websense.com/content/
SupportWebinars.aspx
Webinar
Update
Questions?
18
