XG 18.5 Reporting

Question

We have moved from UTM to XG for our firewall. I am having a little problem reproducing a report that was standard on the UTM. UTM] Logging & Reporting > Web Protection > Web Usage > User > Sites This report showed a consolidate view of each website a host IP address accessed with number of requests. On the XGS custom reports (custom web report) I can search by host IP but the only two options (summary, detail) only give that. A complete count of hits, or all the hits. Is there a way to configure a custom (downloadable) report in XG that matches the UTM Sites report? We would like to search a host IP and produce a consolidates view of all websites that host IP went to. 
 
 Thank You, 
 -Peter Mastrangelo

LuCar Toni · Answer

Web based Logs are actually hard to track and not intended to rebuild a browser history. 
 You could look into CFR (Central firewall reporting). This tool should be able to show most likely more matching data. But Duration is missing, as duration is actually a very inaccurate value anyway.

Peter Mastrangelo · Answer

Thank You for the replys. I was able to produce a report with the asked for information using Sophos Central. Firewall Management > Report Generator > Web Usage Report. There were two (2) issues I originally ran into... 1- I assumed the reporting on the XGS and on Sophos Central were the same. They are not, my mistake. 2- Even tho it showed configured, the XGS was not sending logs to Sophos Central. I unconfigured and reconfigured the Sophos Central Services on the XGS and now the data is appearing on Sophos Central. Thank You Again, -Peter Mastrangelo

XG 18.5 Reporting

Top Replies