生成 TLS 检查报告

Prev Next

本文描述了如何生成一份 TLS 检查报告,该报告突出显示与您的账户策略检测或绕过的流量相关的数据。

概况

Cato 提供了一个预定义报告模板,展示了您的 TLS 检查策略检查或绕过的流量洞察。 这可以帮助您评估您的 TLS 检查策略,并识别重要的流量模式和潜在的安全风险。 报告数据基于互联网和 WAN 防火墙规则生成的事件。

创建定期或一次性报告的模板,其中包括在定义的时间范围内包含的站点和SDP用户。 默认情况下,TLS 检查策略报告的预定义报告模板显示过去一周所有站点和 SDP 用户的流量和数据。

有关报告的更多信息,请参见 Cato 报告。

predefined_reports.png

创建重复的TLS检查报告

Create a new recurring report by defining the Filters for the items included in the report, as well as the Schedule which defines how often the report is generated - every two minutes, daily, weekly, or monthly. Generated reports are stored in the Cato Cloud, and they can be automatically emailed or downloaded. The Schedule also defines the time range that is covered by each report.

You can select a mailing list of email addresses for the recipients, which can include Cato Management Application admins, and external users.

For more information about Mailing Lists, see Working with Mailing Lists.

To create a recurring report:

  1. From the navigation pane, select Home > Reports.

  2. From the Catalog tab, find and select the template you want to use to generate the report.

  3. Click Generate > Create Schedule.

  4. Enter a Report Name.

  5. (Optional) In Filters, select specific sites or users for the predefined report.

    By default, the predefined report includes all sites and users.

  6. Define when the report will be generated and sent:

    1. Select the Frequency.

    2. For Weekly and Monthly scheduled reports, in Every select the day that the report is sent.

    3. Select the timezone.

  7. Select the export format: PDF or CSV.

  8. In Subscriptions, select the Mailing List that receives the report.

    You can click New to create a new mailing list.

  9. Click Save Schedule. The report is added to the Saved Reports tab.

Generating a Recurring Report On Demand

Recurring reports are automatically generated based on their schedule settings. For example, a weekly report configured for Monday, is generated every Monday. You can also choose to manually generate a recurring report on demand, in which case the generated report uses the defined time range based on the current day. If an admin manually generates a weekly report on a Tuesday, the time range for the report is the previous 7 days starting from that Tuesday, regardless of the starting day of the recurring report. For more information about the time range of recurring reports, see Cato Reports.

To generate a recurring report on demand:

  1. From the navigation pane, select Home > Reports.

  2. From the Saved Reports tab, find the recurring report and click Generate Now.

  3. From the Generated PDFs tab, find the report and click Download.

创建一次性 TLS 检查报告

您可以基于TLS检查模板创建一次性报告。 您可以为报告中包含的项目定义筛选器。

To create a one-time report:

  1. From the navigation pane, select Home > Reports.

  2. From the Catalog tab, select the template you want to use to generate the report.

  3. Select Generate > Generate Now.

  4. Enter a Report Name.

  5. Define the relevant Filters for your report.
    These are specific to the report type.

  6. Define the Timeframe and Timezone of the report.

  7. Select the Format: PDF or CSV.

  8. Click Generate.
    The report is generated, and you can download it from the Generated tab.

理解TLS检查报告

对于报告中显示热门项目的部分,它们最多包括该部分的前10个项目。

以下是TLS检查策略报告中的部分:

  • 检查与 绕过的操作系统:图表显示了每个操作系统的检查和绕过流量的事件数量,以及包括所有操作系统的总检查和绕过事件。

  • 按点击量排名的热门应用程序和域 - 出站: 生成事件最多的应用程序和域显示出互联网流量是被检查还是绕过。

    • 最受检查的应用程序: 生成事件最多的应用程序显示流量被检查。

    • 最受绕过的应用程序: 生成事件最多的应用程序显示流量被绕过。

    • 最受检查的域: 生成事件最多的域显示流量被检查。

    • 最受绕过的域: 生成事件最多的域显示流量被绕过。

  • 按点击量排名的热门应用程序和域 - WAN出站: 生成事件最多的应用程序和域显示离网流量是被检查还是绕过。

    • 最受检查的应用程序: 生成事件最多的应用程序显示流量被检查。

    • 最受绕过的应用程序: 生成事件最多的应用程序显示流量被绕过。

    • 最受检查的域: 生成事件最多的域显示流量被检查。

    • 最受绕过的域: 生成事件最多的域显示流量被绕过。

  • 最受检查和绕过的类别: Cato系统类别中生成事件最多的显示流量被检查或绕过。

    • 最受检查的类别 - 出站: 生成事件最多的类别显示互联网流量被检查。

    • 最受绕过的类别 - 出站: 生成事件最多的类别显示互联网流量被绕过。

    • 最受检查的类别 - WAN出站: 生成事件最多的类别显示WAN流量被检查。

    • 最受绕过的类别 - WAN出站: 生成事件最多的类别显示WAN流量被绕过。

  • TLS见解:

    • TLS证书错误: 显示每种类型的TLS证书错误生成的事件数量