Juniper NETWORK AND SECURITY MANAGER 2010.4 - ADMININISTRATION GUIDE REV1, Руководство администратора

Страница: 861 / 1026

Report Types
Report Manager contains a set of predefined reports that you can use out of the box. We
recommend that you use the predefined reports. First to familiarize yourself with how
reporting works in NSM. You can then fine tune these reports by generating custom
reports based on the predefined reports.
Predefined Reports
The predefined reports in Report Manager provide a summary of key log events and
alarms generated by the devices in your network (such as Top Scan Sources or Top
Attacks). Two reports (Logs By User-set Flag and Top Rules) provide administrative
information useful if you are tracking incidents or optimizing your rules. For typical use
cases describing each of these reports, see “Using Reports” on page 825.
Report Manager groups predefined reports into the following categories:
•
Firewall/VPN Reports on page 811
•
DI/IDP Reports on page 812
• Screen Reports on page 813
• Administrative Reports on page 814
•
UAC Reports on page 814
•
Profiler Reports on page 815
• AVT Reports on page 815
• SSL/VPN Reports on page 815
•
EX Series Switches Report on page 816
Firewall/VPN Reports
Table 110 on page 811 lists and describes reports in NSM that provide information related
to your network’s firewalls and VPNs.
Table 110: Firewall and VPN Reports
Description Report
The total number of alarms generated by the managed security devices
in your network, excluding traffic alarms Top Alarms
The total number of traffic alarms generated by the managed security
devices in your network Top Traffic Alarms
The total number of traffic log entries generated by the managed
security devices in your network, within filter constraints Top Traffic Log
The total number of configuration log entries generated by the
managed security devices in your network, within filter constraints Top Configuration Logs
811 Copyright © 2010, Juniper Networks, Inc.
Chapter 20: Reporting