Guest User!

You are not Sophos Staff.

This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

XG 18.5 Reporting

We have moved from UTM to XG for our firewall.

I am having a little problem reproducing a report that was standard on the UTM.

UTM] Logging & Reporting > Web Protection > Web Usage > User > Sites
This report showed a consolidate view of each website a host IP address accessed with number of requests.

On the XGS custom reports (custom web report) I can search by host IP but the only two options (summary, detail) only give that. A complete count of hits, or all the hits.

Is there a way to configure a custom (downloadable) report in XG that matches the UTM Sites report?
We would like to search a host IP and produce a consolidates view of all websites that host IP went to.

Thank You,

-Peter Mastrangelo



This thread was automatically locked due to age.
  • Web based Logs are actually hard to track and not intended to rebuild a browser history. 

    You could look into CFR (Central firewall reporting). This tool should be able to show most likely more matching data. But Duration is missing, as duration is actually a very inaccurate value anyway. 

  • Thank You.

    I will look into configuring the central firewall reporting.

    The duration is not important. We are primarily looking for the site and number of hits.

    -Peter Mastrangelo

  • Hi,

    Maybe you can try this method:

    Go to Reports --> Show Reports settings --> Data management --> Enable Export customization

    When you enable this option you can go now to Custom web report --> Web surfing reports --> Detail

    Now you can export all records into a CSV file and open it in Excel to check all the web pages that the logs saved.

    If you cant view all the detailed reports or you cant filter by IP, check this post: https://community.sophos.com/sophos-xg-firewall/f/discussions/130274/custom-reports-odd-behavior

    Maybe you have more luck with detailed reports than me.

    Best regards.

  • Thank You for the replys.

    I was able to produce a report with the asked for information using Sophos Central. Firewall Management > Report Generator > Web Usage Report.

    There were two (2) issues I originally ran into...
        1- I assumed the reporting on the XGS and on Sophos Central were the same. They are not, my mistake.
        2- Even tho it showed configured, the XGS was not sending logs to Sophos Central. I unconfigured and reconfigured the Sophos Central Services on the XGS and now the data is appearing on Sophos Central.

    Thank You Again,
    -Peter Mastrangelo