Using the "user" filter in the web protection reporting is inconsistent. Sometimes it requires a username, sometimes a host-, or dns name, sometimes the IP do display a report.
Same with listing of "users"
Will display for some Username, for some hostnames, for some IP addresses.
This is unuseable for creating web reports based on "user".
It should be possible to filter / create a web report for each of those items allowed in the user filter as username, hostname, IP address. Means, if I filter for "USER X" (which is solely logged in on the device LAN_XYZ with a static DHCP mapping), or filter for LAN_XYZ or it's IP address 102.168.10.10, I should a) for both get a report at all, and b) it should be at least for hostname and IP address consistent. Report on Username may differ, as there's surely also traffic during logged a out user ;o)
Same issue in departement reports. If you generate a report for "LAN (Network)" to generate a report specific for a network subnet as example, only those hosts are included, where the "user" is shown as IP address. Other hosts within the same network, but listed with the hostname or username are simply ignored.