mcafee web reporter 5.2 · pdf filemcafee® web reporter (web reporter) is a powerful...

User GuideRevision A

McAfee Web Reporter 5.2.1

COPYRIGHTCopyright © 2012 McAfee, Inc. Do not copy without permission.

TRADEMARK ATTRIBUTIONSMcAfee, the McAfee logo, McAfee Active Protection, McAfee AppPrism, McAfee Artemis, McAfee CleanBoot, McAfee DeepSAFE, ePolicy Orchestrator,McAfee ePO, McAfee EMM, McAfee Enterprise Mobility Management, Foundscore, Foundstone, McAfee NetPrism, McAfee Policy Enforcer, Policy Lab,McAfee QuickClean, Safe Eyes, McAfee SECURE, SecureOS, McAfee Shredder, SiteAdvisor, SmartFilter, McAfee Stinger, McAfee Total Protection,TrustedSource, VirusScan, WaveSecure, WormTraq are trademarks or registered trademarks of McAfee, Inc. or its subsidiaries in the United States andother countries. Other names and brands may be claimed as the property of others.

LICENSE INFORMATION

License AgreementNOTICE TO ALL USERS: CAREFULLY READ THE APPROPRIATE LEGAL AGREEMENT CORRESPONDING TO THE LICENSE YOU PURCHASED, WHICH SETSFORTH THE GENERAL TERMS AND CONDITIONS FOR THE USE OF THE LICENSED SOFTWARE. IF YOU DO NOT KNOW WHICH TYPE OF LICENSE YOUHAVE ACQUIRED, PLEASE CONSULT THE SALES AND OTHER RELATED LICENSE GRANT OR PURCHASE ORDER DOCUMENTS THAT ACCOMPANY YOURSOFTWARE PACKAGING OR THAT YOU HAVE RECEIVED SEPARATELY AS PART OF THE PURCHASE (AS A BOOKLET, A FILE ON THE PRODUCT CD, OR AFILE AVAILABLE ON THE WEBSITE FROM WHICH YOU DOWNLOADED THE SOFTWARE PACKAGE). IF YOU DO NOT AGREE TO ALL OF THE TERMS SETFORTH IN THE AGREEMENT, DO NOT INSTALL THE SOFTWARE. IF APPLICABLE, YOU MAY RETURN THE PRODUCT TO MCAFEE OR THE PLACE OFPURCHASE FOR A FULL REFUND.

2 McAfee Web Reporter 5.2.1 User Guide

Contents

Preface 5About this guide . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 5

Audience . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 5Conventions . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 5What's in this guide . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 6

Find product documentation . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 6

1 Introduction 7About McAfee Web Reporter . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 7Report language options . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 7

2 Getting started 9Access in the user interface . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 9My Profile settings . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 9Log on to McAfee Web Reporter . . . . . . . . . . . . . . . . . . . . . . . . . . . . 9Navigating the user interface . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 10

Navigation bar . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 10Toolbars . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 11

Set account preferences . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 12Configure default email settings . . . . . . . . . . . . . . . . . . . . . . . . . 12Configure Quick View Custom report results . . . . . . . . . . . . . . . . . . . . 13Configure default report results . . . . . . . . . . . . . . . . . . . . . . . . . 13Configure the number format . . . . . . . . . . . . . . . . . . . . . . . . . . 13Configure the date and time format . . . . . . . . . . . . . . . . . . . . . . . 14

Change your password . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 14

3 Quick View Reports 15About Quick View reports . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 15Configure Summary reports . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 15

View Summary reports . . . . . . . . . . . . . . . . . . . . . . . . . . . . 16Configure Quick View Custom reports . . . . . . . . . . . . . . . . . . . . . . . . . 16

Save custom reports as Advanced reports . . . . . . . . . . . . . . . . . . . . . 17Favorites reports . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 18

Save a Quick View Custom report as a Favorite report . . . . . . . . . . . . . . . . 18Add a Favorite report from the Advanced Reports window . . . . . . . . . . . . . . 19

View multiple Quick View reports . . . . . . . . . . . . . . . . . . . . . . . . . . . 19View additional details . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 20View sites and site reputation information . . . . . . . . . . . . . . . . . . . . . . . . 20Send Quick View reports . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 20

Send Favorite reports from the Advanced Reports window . . . . . . . . . . . . . . 21Schedule Favorite or Custom Quick View reports . . . . . . . . . . . . . . . . . . . . . 21

4 Advanced reports 23Preconfigured Advanced reports . . . . . . . . . . . . . . . . . . . . . . . . . . . . 23Customizing Advanced reports . . . . . . . . . . . . . . . . . . . . . . . . . . . . 23

McAfee Web Reporter 5.2.1 User Guide 3

Queries . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 24Filters . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 25Default filters . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 27Custom filters . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 27

Configure custom queries . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 27Add or edit filters . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 28Configure Advanced reports . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 28

Use advanced settings to get multiple reports . . . . . . . . . . . . . . . . . . . 29Run an Advanced report . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 30Schedule Advanced reports . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 30

A Preconfigured queries 33

B Preconfigured filters 43

C Preconfigured Advanced reports 45

Index 51

Contents


Preface

This guide provides the information you need to use the product.

Contents About this guide Find product documentation

About this guideThis information describes the guide's target audience, the typographical conventions and icons usedin this guide, and how the guide is organized.

AudienceMcAfee documentation is carefully researched and written for the target audience.

The information in this guide is intended primarily for:

• Users — People who use the computer where the software is running and can access some or all ofits features.

ConventionsThis guide uses these typographical conventions and icons.

Book title, term,emphasis

Title of a book, chapter, or topic; a new term; emphasis.

Bold Text that is strongly emphasized.

User input, code,message

Commands and other text that the user types; a code sample; a displayedmessage.

Interface text Words from the product interface like options, menus, buttons, and dialogboxes.

Hypertext blue A link to a topic or to an external website.

Note: Additional information, like an alternate method of accessing anoption.

Tip: Suggestions and recommendations.

Important/Caution: Valuable advice to protect your computer system,software installation, network, business, or data.

Warning: Critical advice to prevent bodily harm when using a hardwareproduct.


What's in this guide This guide is organized to help you find the information you need.

This guide is intended for a reporting administrator or user who uses McAfee Web Reporter to viewweb traffic data for an organization's network. Tasks include viewing real‑time report data inpre‑configured reports or creating, scheduling, and generating custom reports for viewing and sharing.

This guide assumes the reporting administrator and user is familiar with:

• computer operating systems

• file types

• Internet

• networks

Find product documentationMcAfee provides the information you need during each phase of product implementation, frominstallation to daily use and troubleshooting. After a product is released, information about the productis entered into the McAfee online KnowledgeBase.

Task1 Go to the McAfee Technical Support ServicePortal at http://mysupport.mcafee.com.

2 Under Self Service, access the type of information you need:

To access... Do this...

User documentation 1 Click Product Documentation.

2 Select a product, then select a version.

3 Select a product document.

KnowledgeBase • Click Search the KnowledgeBase for answers to your product questions.

• Click Browse the KnowledgeBase for articles listed by product and version.

PrefaceFind product documentation


http://mysupport.mcafee.com

1 Introduction

McAfee® Web Reporter (Web Reporter) is a powerful reporting tool that allows you to create reportsthat show you how people in your organization are using the Internet.

Contents About McAfee Web Reporter Report language options

About McAfee Web ReporterMcAfee Web Reporter provides the reporting tools to identify issues in your organization such asliability exposure, productivity loss, bandwidth overload, and security threats. You can use thisinformation to modify web use policies and provide guidance for appropriate Internet use in yourorganization.

McAfee Web Reporter is compatible with:

• McAfee® Web Gateway • McAfee® SaaS Web Protection Service

• McAfee® SiteAdvisor® Enterprise software • Other third‑party web filtering solutions

• McAfee® SmartFilter® software

Report language optionsMcAfee Web Reporter can translate some fields and data in predefined queries and predefinedAdvanced reports into one of the supported languages. When you send, save, schedule, or run areport immediately, you can select the language you want for the translatable fields and data.

McAfee Web Reporter allows you to select a language when sending a Quick View Summary or Customreport, and when saving or scheduling a custom or Advanced report. This translation happens withinthe software only when you select a language for your report. This option does not translate fields andinformation within the user interface or customized reports (including customized queries, filters, andso on).

Selecting a language will translate some data and the available translatable fields of a report, whileeverything else appears in the language used for the log files. For example, if you have log files thatwere generated in English and you select French for the translatable report fields and some data, youwill get a report with French labels and data, with everything else appearing in English.

1


Translatable fields:

• Actions — Translates the predefined actions in McAfee Web Reporter (Allow, Block, Bypass, Monitor,Override, Warn)

• Date and time formats — Translates date and time formats to the selected language

• Report titles, labels, headings, and legends — Translates these items in your report

• Category names — Translates any [Global Threat Intelligence] web category name that appears in yourreport

• Reputation ratings — Translates[Global Threat Intelligence] web reputation that appears in your report

• Protection areas — Translates protection areas that are recognized in McAfee Web Reporter

Any user‑defined field, such as a custom column name, is maintained in the original language.

Select from the following list of languages:

• Chinese (Simplified) • Japanese

• Chinese (Traditional) • Korean

• English (US) • Portuguese

• French • Russian

• German • Spanish

• Italian

1 IntroductionReport language options


2 Getting started

Log on to the McAfee Web Reporter web‑based user interface to configure account settings.

Contents Access in the user interface My Profile settings Log on to McAfee Web Reporter Navigating the user interface Set account preferences Change your password

Access in the user interfaceAccess to areas and menus of the user interface are based on the permissions defined on your McAfeeWeb Reporter account.

A reporting administrator creates logon accounts for McAfee Web Reporter. During account creation,the administrator defines which areas and menus of the user interface the account can access. If youneed access to additional McAfee Web Reporter user interface areas or menus, contact your reportingadministrator.

My Profile settingsConfigure account preferences to access McAfee Web Reporter and generate reports.

Change profile settings using these menu options:

• Preferences — Options that define sender and recipient email addresses, default number ofresults per page in a report, number format, and date and time format

• Summary Reports — Options that define the default Summary report that appears by defaultafter logging on to McAfee Web Reporter, and filters for the default Summary report

• Logon — Option to change your password or view your directory logon information

Log on to McAfee Web ReporterBoth reporting administrators and users log on to McAfee Web Reporter using the web‑based userinterface.

Before you beginEnable cookies for your browser.

2


A McAfee Web Reporter administrator will provide you with your user name and password.

Task1 Open McAfee Web Reporter using one of the following methods:

• Double‑click the McAfee Web Reporter desktop icon.

• [HTTP] Open a new browser window and type http://address:9111/reporter where addressis the IP address or the fully qualified domain name (FQDN) of the computer on which thesoftware is installed.

• [HTTPS] Open a new browser window and type https://address:9112/reporter whereaddress is the IP address or the fully qualified domain name (FQDN) of the computer on whichthe software is installed.

If the site’s certificate is not verified because it is self‑signed, take the necessary action in yourbrowser to continue to the site.

2 If prompted to install the Java Runtime Environment (JRE), click Yes. The JRE is required to openthe McAfee Web Reporter interface.

3 Type your user name and password.

4 Click Options and select the directory your user name and password belong to.

5 Click Log On.

The McAfee Web Reporter user interface opens.

Navigating the user interfaceUse the navigation bar and various toolbars to access various windows and customize the display inthe user interface.

Navigation barThe navigation bar is your first step in accessing various windows throughout McAfee Web Reporter.

Features include:

• Quick View — Displays two types of condensed interactive reports for your organization—Summaryand Custom

• Reports — Gives you the ability to create reports with more specific detail (Advanced reports) thanQuick View reports

• My Profile — Determines account preferences and the default Quick View Summary report, displaysdelegated reports access you have, and the option to change your account password

• Administration (for administrator accounts only) — Gives administrators the ability to set up McAfeeWeb Reporter for use in your organization

For more information about this menu, see the McAfee Web Reporter Product Guide.

2 Getting startedNavigating the user interface


ToolbarsUse toolbars to further customize what is displayed in the user interface.

There are a few different toolbars available depending on which window is displayed. Toolbars arelocated at the top of the list for Quick View and Reports windows.

Figure 2-1 Quick View reports toolbar

Figure 2-2 Advanced reports toolbars

Figure 2-3 Additional Filters toolbar

Table 2-1 Toolbar options

Number Option Definition

1 Back Displays the previously viewed report.

2 Save Report Saves a Custom report as a Favorite or Advanced report.

3 Send Report Stores a Summary or Quick View Custom report on the McAfee WebReporter server or sends it through email or FTP.

4 Schedule Report Sets the schedule, such as frequency, format, delivery, and delegation,for a Quick View Custom report.

5 Bar Graph Displays the Summary or Quick View Custom report data in bar graphformat.

6 Table Displays the Summary or Quick View Custom report data in tableformat.

7 Hits Displays or hides the total number of hits per category for a Quick ViewCustom report.

8 Percent Hits Displays or hides the percentage of total hits per category in a QuickView Custom report.

Getting startedNavigating the user interface 2


Table 2-1 Toolbar options (continued)

Number Option Definition

9 Bytes Displays or hides the total number of bytes per category for a QuickView Custom report.

10 Percent Bytes Displays or hides the percentage of total bytes per category in a QuickView Custom report.

11 Current page of totalpages

Displays the current page number in view and the total number ofpages for a Quick View Custom report. This option is also available forAdvanced reports.

12 Results Displays the number of results present in a Quick View Custom report.This option is also available for Advanced reports.

13 Find Defines all or part of a filter name to search for.

14 Find Now Searches the filters list for matches to what you typed in the Find field.

15 Clear Clears any search terms entered in the Find field.

16 Reports Lists the names of Advanced reports in the Reports Results list.

17 Dates Lists time‑range options used to filter the Report Results list.

18 Display Specifies the type of filters to display in the list.

Set account preferencesConfigure account preferences for Summary reports, Delegated reports, and logon user interfacesettings.

Contents Configure default email settings Configure Quick View Custom report results Configure default report results Configure the number format Configure the date and time format

Configure default email settingsEnter a recipient and sender email address to use when emailing reports.

These fields are optional—you can leave one or both fields empty. The email addresses entered hereact as the default email addresses when a report is emailed. You can also choose to specify alternativerecipient and sender email addresses when configuring the report delivery.

TaskFor option definitions, click ? in the interface.

1 Select My Profile | Preferences.

2 Type the full email addresses for the recipient and sender.

Use commas without spaces to separate multiple email addresses.

3 Click Save.

2 Getting startedSet account preferences


Configure Quick View Custom report resultsConfigure the maximum results per page for Quick View Custom reports.

The number of results you select is the default number that appears in the Maximum report results field ofthe Quick View | Custom toolbar. To override this number for a specific report or list, select a differentnumber in the Maximum report results field.



2 From the Maximum report results drop‑down list, select the number of results.

3 Click Save.

Configure default report resultsConfigure the default number of data rows per page.

When setting the default number of results per page, if your Quick View Custom report contains atotal of 50 results, and your default results per page is set to 10, there will be five pages of the reportwith only 10 results on each page.

The number of results you select is the default number that appears in the Results field of the pagingtoolbar. To override this number for a specific report or list, select a different number in the Results fieldof the paging toolbar.



2 From the Results per page drop‑down list, select the number of results.

3 Click Save.

Configure the number formatControl how numbers appear in reports by selecting a number format.Your region might use a different separator to indicate a number in the thousands or decimals such asa comma, period, or space. Use the number format option to specify the preferred separators.



2 In the Thousands separator field, type the separator. Choose from these options:

• Comma (,)

• Period (.)

• Clear the field to use a blank space to separate thousands

The default value is comma (,).

Getting startedSet account preferences 2


Examples:

• 123,456,789

• 123.456.789

• 123 456 789

3 In the Decimal separator field, type the separator. Choose from these options:

• Comma (,)

• Period (.)

• Clear the field to use a blank space to separate thousands

Examples:

• 123.456.789

• 123,456,789

• 123 456 789

4 Click Save.

Configure the date and time formatDate and time formats control the appearance of calendar dates and clock times.

Specify the preferred calendar date and clock time formats.



2 From the Date format drop‑down list, make a selection.

3 From the Time format drop‑down list, make a selection.

4 From the First day of week drop‑down list, make a selection.

5 Click Save.

Change your passwordProfile settings displays your current name (user name) and provides the ability to change yourpassword depending on your account type.

This option is available only if your user account is a local McAfee Web Reporter account. If you log onusing a network user name and password, you will not be able to change your password here.


1 Select My Profile | Logon.

2 Type and confirm a new password.

3 Click Save.

4 Log off and log back on to McAfee Web Reporter using your new password.

2 Getting startedChange your password


3 Quick View Reports

Quick View reports are interactive, real‑time reports that provide a condensed view of yourorganization's data.

Contents About Quick View reports Configure Summary reports Configure Quick View Custom reports Favorites reports View multiple Quick View reports View additional details View sites and site reputation information Send Quick View reports Schedule Favorite or Custom Quick View reports

About Quick View reportsQuick View reports appear when you log on to the McAfee Web Reporter user interface.

When viewing a Quick View report, you can open multiple Summary, Quick View Custom and Favoritereports and drill down to view more detail in a report. Use tabs in the user interface to open morethan one Quick View report at one time.

Choose from these Quick View report options:

• Summary reports — Predefined, interactive summary reports display a snapshot of networkactivity for the week. Reports consist of data for sites, user names, user IP addresses, user groups,applications, categories, malware, web reputation, protection areas, and actions. Summary reportsalso offer drill down capabilities to view more refined detail for the available data. The Quick ViewSummary report is the first report you see each time you log on

• Custom reports — Customizable reports that provide additional date, data type, filter, and displayconfigure options

• Favorite reports — Custom reports you can save to access at a later time

Configure Summary reportsConfigure how you want the first Summary report to appear when you log on to the user interface.You can include a risk group and select the data you want to display within this report.

3



1 Select My Profile | Summary Reports.

2 From the Default report drop‑down list, select a report.

The default report type is Site.

3 From the Default risk group drop‑down list, select a risk group.

This option is available only when the Categories report is chosen as the default report. Whenchoosing a default risk group, the Categories report will display only those categories contained in therisk group you select.

4 Select filters to further restrict which data is displayed on the default Summary report.

By default, the Summary reports display all of the available data as report results.

5 Click Save.

Tasks

• View Summary reports on page 16You can view ten preconfigured Summary reports that provide an interactive depiction ofactivity for today, yesterday, and the past seven days.

View Summary reportsYou can view ten preconfigured Summary reports that provide an interactive depiction of activity fortoday, yesterday, and the past seven days.


1 Select Quick View | Summary.

2 Select the report type to view the report.

Some reports might return a dash (–) instead of a categories, malware, protection areas, usernames, applications, or reputation. This dash indicates the item is uncategorized, not associatedwith a particular type (such as no malware, protection area, or reputation), or the user isanonymous.

3 To drill down to subreports, click an entry from the report displayed on your screen to display a listof submenus that will lead you to additional report data.

Configure Quick View Custom reportsUse Quick View Custom reports when you want to select the date, data type, filter, and display optionsfor your report.

TaskFor option definitions, click Help in the interface.

1 Select Quick View | Custom.

The Custom menus appear. By default, the menus are collapsed.

3 Quick View ReportsConfigure Quick View Custom reports


2 Select the filters for expanding or narrowing the report data.

• Leave the All filter type selected to include all data

• Select a preconfigured filter or a user‑created filter to limit the data in the report

• Add a new filter by typing directly into a filter field

• Type the filter data exactly as it would appear in the log data or report

• Some filter fields automatically search log data for matching results as soon as you starttyping and display the complete matching result above the field. If there are no matches, noresults are displayed. For example, you want to filter on the user name jshepherd. You typejs in the user name field and jshepherd appears above the field

• Use commas to separate multiple entries

• Unsaved filters appear in italics (new unsaved user group filters appear in bold)

• To save the new filter, click the down arrow next to the filter and select Save and completeconfiguring the filter

• To clear the field, select the All option for that filter type from the drop‑down list

Before you change a report filter, review reports that use that filter. When you change a report filter,it affects all Quick View Custom and Advanced reports that use the filter.

3 Select display options for the report.

4 Click View to display the report.

If the report does not include any data, verify that the report criteria is valid. If the criteria is valid,there might not be any matching report data.

5 When the Quick View Custom report takes more than a few seconds to appear, choose from theseoptions:

• Wait for the report to display — Keep this tab open until the report appears. While the report isgenerating, you can open a new tab to run another Custom report

• Schedule the report — Click to open the Add Scheduled Report window and schedule the report togenerate

• Cancel the report — Click to cancel the generating report

Tasks• Save custom reports as Advanced reports on page 17

Save a custom report as an Advanced report to add queries and other configurationchanges to further refine the report.

Save custom reports as Advanced reportsSave a custom report as an Advanced report to add queries and other configuration changes to furtherrefine the report.

Quick View ReportsConfigure Quick View Custom reports 3



1 Create and view a custom report.

2 On the report viewing toolbar, click Save as Advanced Report.

3 Name the report and click OK.

Any queries associated with the custom report are preserved and saved with the same name as thereport.

The report is added to the Advanced reports list, and a query with the same name appears in thequeries list.

• View the report from Reports | Advanced | Advanced Reports.

• View the query from Reports | Advanced | Queries.

You can change the report layout between table and bar graph views using options in the associatedquery, but you will not have interactive abilities for the created Advanced report.

Favorites reportsCreate a Favorite report from a Quick View Custom report for use at a later time. Saving a Quick ViewCustom report as a Favorite preserves the properties used to generate the report, not the actualreport data.

Tasks• Save a Quick View Custom report as a Favorite report on page 18

After viewing a Quick View Custom report, you can save it as a Favorite report.

• Add a Favorite report from the Advanced Reports window on page 19Create a Favorite report without viewing it in the Quick View report window.

Save a Quick View Custom report as a Favorite reportAfter viewing a Quick View Custom report, you can save it as a Favorite report.

TaskFor option definitions, click ? in the interface.For option definitions, click Help in the interface.

1 Select Quick View | Custom and create the Quick View Custom report.

2 From the toolbar, click Save as Favorite.

3 In the Favorite name field, type a descriptive name for the report.

4 Click OK.

The new Favorite report appears in these locations:

• Quick View | Favorites

• Reports | Manage Reports | Report Console

3 Quick View ReportsFavorites reports


Add a Favorite report from the Advanced Reports windowCreate a Favorite report without viewing it in the Quick View report window.

Use the same options you would use to create a Quick View Custom report from the Quick View windowwhen you create it in the Advanced Reports window.


1 Select Reports | Advanced | Favorite Reports.

2 Click Add.

3 Configure the Favorite report, then click OK.

The new Favorite report appears in these locations:

• Quick View | Favorites

• Reports | Manage Reports | Report Console

View multiple Quick View reportsThe tabbed reports feature allows you to view multiple Summary, Favorite, and Custom Quick Viewreports, and move within the drill down paths.

Use tabs to quickly switch between two or more reports. There are three ways to view a report in anew, empty tab:

• Click New Tab to open a new, empty tab.

Figure 3-1 New tab

• Right‑click a drill down link and select View in New Tab.

Figure 3-2 New tab menu

• Right‑click a bread crumb and select View in New Tab.

Figure 3-3 New tab menu for breadcrumb

Quick View ReportsView multiple Quick View reports 3


View additional detailsView additional report details in Quick View reports using the drilldown links.

Click any of the underlined links in the report to view additional links and details. The clicked linkappears as a Quick View Custom report.

Figure 3-4 Drilldown links

View sites and site reputation informationWhen viewing a Site Activity report or a Detailed Activity report, click a URL to see the View Site and View SiteReputation links.

Task

1 In a Quick View report, drill down until you see the full URL. The View Site Reputation and View Site linksappear below the URL.

Figure 3-5 View site and reputation links

2 Displaying the links:

• To open a new browser window that displays the selected website, click View Site.

• To open a new browser window that displays the TurstedSource.org website with reputationinformation for the URL, click View Site Reputation.

Send Quick View reports Send Summary, Custom, and Favorite reports.


1 Select Quick View.

2 View or create a Summary, Custom, or Favorite report.

3 Quick View ReportsView additional details


3 On the Quick View toolbar, click Send Report.

4 Format the report and configure delivery options.

Use commas without spaces to separate multiple recipient email addresses.

5 Click Send.

Send Favorite reports from the Advanced Reports window Send Quick View Favorite reports from the Advanced Reports window.


1 Select Reports | Advanced | Favorite Reports.

2 Select a favorite report from the list and click Run Now.

3 Format the report and configure delivery options.

Use commas without spaces to separate multiple recipient email addresses.

4 Click Send.

Schedule Favorite or Custom Quick View reportsAfter creating a Quick View Custom report or saving a Favorite report, schedule the report to runperiodically according to your needs. When you schedule a report, you can run it as another personand automatically deliver it to the location of your choice.


1 Do one these options:

• Select Quick View, view a Favorite or Quick View Custom report, and click Schedule Report

• Select Reports | Advanced | Report Schedules and click Add

2 Name the scheduled report.

3 Select Saved favorite (quick view report).

4 Configure the options on the available tabs, then click OK.

When adding multiple recipient addresses under the Delivery tab, separate the addresses usingcommas without spaces.

Quick View ReportsSchedule Favorite or Custom Quick View reports 3


3 Quick View ReportsSchedule Favorite or Custom Quick View reports


4 Advanced reports

Advanced reports include the most amount of detail and customization options.

Where Quick View reports display a summary of interactive, real‑time data, Advanced reports give youthe ability to fully customize and schedule offline reports.

Customize Advanced reports using queries, filters, and layout options.

Contents Preconfigured Advanced reports Customizing Advanced reports Configure custom queries Add or edit filters Configure Advanced reports Run an Advanced report Schedule Advanced reports

Preconfigured Advanced reportsMcAfee Web Reporter is installed with preconfigured Advanced reports for each user and administrator.

Each preconfigured Advanced report includes one or more queries and filters. The queries and filtersassociated with the preconfigured Advanced reports are available to any reporting administrator oruser as preconfigured queries and filters.

To view a list of preconfigured Advanced report definitions, refer to Appendix C.

Customizing Advanced reportsCustomize the data and display options in Advanced reports.

These report customizing options are available:

4


• Queries — Acts as a communicator between the database and the report, telling the databasewhich types of data to display in the report

• Filters — Communicates the precise data within the data type to pull from McAfee Web Reporterand display within reports

QueriesQueries are the foundation for advanced reports that define the type of data in a report and how thatdata is displayed in the report.

A report is organized into sections of data, such as user names, websites, dates, and more. McAfeeWeb Reporter retrieves query data from log files that are stored in a registered database.

Figure 4-1 McAfee Web Reporter workflow

Contents Default queries Custom queries

Default queriesMcAfee Web Reporter has preconfigured queries that are used in the preconfigured Advanced reports.However, you can also use these queries in your own reports.

The name of each preconfigured query corresponds to a preconfigured Advanced report. However, thepreconfigured queries were created using typical configurations for use with any Advanced report. Usethe original configuration in your own Advanced reports, or copy the preconfigured query and modify itto match your reporting needs.

McAfee Web Reporter shares preconfigured queries across all reporting users and administrators.

To view a list of preconfigured queries, refer to Appendix A.

Custom queriesCustom queries are queries you configure to fit your specific reporting needs.

Query typesThe query type determines the amount of detail in a report.

There are two types of queries to choose from when setting up a query—summary or detailed. Eachquery type has its own set of data options (also called columns) to select from. The data optionsdefine which data type is shown in your report, such as user name, dates, URL, and so on. The querytype determines the amount of detail in the report for each type of data.

4 Advanced reportsCustomizing Advanced reports


Query columns and orderQuery columns and the order of priority tells the report which type of data to get from the databaseand in which order to display it.

Query-level filtersQuery‑level filters, called column properties, filter information on a single column (data type)according to parameters you define.

Query‑level filters are different from report‑level filters in that query‑level filters offer limited filteringcapabilities only for the query in which they are set up and are applied after any report‑level filters.

For example, you want a report to show all URLs that include Google searches for used cars. In yourquery you would select the URL data column and type www.google.com/search?*q=used+cars* in theInclude column property field.

Use column properties to filter data only when report‑level filters cannot be used.

The options available for column properties depend on the type of data column you select to filter on.Options include changing the display name of the column, including or excluding data, sorting, settingthe measurement of data, decimal point placement, and more.

When you want more filtering capabilities and control over data in any query—such as filtering on usernames, categories, or log sources—use report‑level filters.

Query layoutMcAfee Web Reporter provides a number of layout options to display that data it retrieves. Choosefrom a variety of layout options to best display your text.

FiltersAfter a query communicates to McAfee Web Reporter which type of data to display in the report, thefilter then communicates with McAfee Web Reporter the exact data within the data type to pull for thereport.

Filter typesMcAfee Web Reporter offers several types of filters for use in Quick View Custom reports andAdvanced reports.

Use one of these filter types to refine the data for your reports:

Advanced reportsCustomizing Advanced reports 4


Table 4-1 Filter types and descriptions

Filter type Description

Action Identifies the action taken on a URL request when a user visited a website. Actionscorrespond to the web filter policy in place on your network.For example, if you have a policy to block all gambling websites and a userattempts to visit gambling.example.com, the report shows thatgambling.example.com was blocked.

Application Identifies the Web application name as detected by McAfee Web Gateway andMcAfee SaaS Web Protection Service.For example, if you want to view a report that includes only Social Networkingapplications, select Social Networking and select Include these applications.

Category Identifies the requested URL's TrustedSource database category or correspondingrisk group.For example, a Category filter configured to show data for the Productivity riskgroup will filter only the data categorized as a productivity risk group category.

File Type Identifies file types found in the URL.For example, a File Type filter configured to show data only for video files willdisplay only those URL requests for websites that contain video files

Log Source Identifies which log source the data came from.For more information about log sources, contact a reporting administrator.

Malware Identifies malware found in requested URLs.For example, if a user visited a website that was infected with a known virus, thevirus name will show up as malware.

Protection Area Identifies protection areas that filtered the URL request.Protection areas are defined by the security feature that filtered the site.

For example, if you are using McAfee Web Gateway, the corresponding protectionarea is one of the Web Filter choices.

Protocol Identifies which Internet protocol the URL uses.For example, if you want to show a report that excludes FTP sites, select Excludeselected protocols and select the checkbox next to FTP.

Site Identifies URLs for the websites.For example, to filter for all McAfee websites, type: *.mcafee.*.

User IP Identifies which user IP address made the URL request.For example, you might want data about specific IP addresses if you have acomputer lab that allows any user or users with generic log on IDs to logon and visitwebsites.

4 Advanced reportsCustomizing Advanced reports


Table 4-1 Filter types and descriptions (continued)

Filter type Description

User Name(and Group)

Identifies user names and group names that made URL requests.For example, to include the Management group, but exclude specific individualswithin that group, place the group at the top of the list and the users at the bottomof the list.

Groups filters work with LDAP groups or internal directory groups.

Reputation Identifies the level of risk associated with a URL by associating the URL with aparticular reputation score.For example, a website scored as Minimal Risk is from a legitimate source.

Default filtersMcAfee Web Reporter includes four preconfigured filters, each filter corresponding to a risk group thatcontains specific TrustedSource database categories.

The four preconfigured filters are designed for use with preconfigured Advanced reports. However, thepreconfigured filters were created covering four common risk groups that you can use in any Advancedreport or Quick View Custom report.

To view a list of preconfigured filters, refer to Appendix B.

Custom filtersMcAfee Web Reporter allows you to make your own filters to fit your exact reporting needs.

Configure a filter using the following options:

• Use the filter to include data or exclude data.

• Select options based on the filter type.

Filter exampleFor example, you selected the Category column for your query, but you want data only for aparticular set of categories (risk group), such as Productivity categories. To do this, youwould create a Category filter that includes the Productivity risk group only.

Configure custom queriesCreate your own custom queries using the query configuration options.


1 Select query and data types

a Select Reports | Advanced | Queries.

b Click Add, or select an existing query from the list and click Edit.

To modify a predefined query, first make a copy, and then edit the copy.

Advanced reportsConfigure custom queries 4


c From the Available Columns drop‑down list, select either Web ‑ Summary or Web ‑ Detailed.

d Select one or more data columns, and click the > arrow button to move it to the Selected columnsfield.

Columns placed at the top of the Selected columns field are the first to have rules applied. Fortables, the column placed at the top of the list appears as the first column on the left of thereport.

2 Configure query‑level filters

a Click the Column Properties tab.

b In the Column field, select the column to apply a query‑level filter.

c On the Properties for <column name> pane, type or select the query‑level filter settings, thenclick OK.

If a value is entered for which no database records exist, the report will be blank.

3 Set up query layout

a Click the Layout tab.

b Select the type of layout and the number of results to include, then click OK.

Add or edit filtersCreate a new filter, or edit an existing filter.


1 Select Reports | Advanced | Filters.

2 Click Add to create a new filter and select the filter type you want to use, or click Edit to modify anexisting filter.

3 Configure the filter and click OK.

Configure Advanced reportsTo generate an Advanced report, configure date range, query, filter, and advanced settings.

Task1 Name and select the queries for Advanced reports.

a Select Reports | Advanced | Report Console.

b Click Add.

c Provide a name and description for the report.

The name cannot contain parentheses. The report name is visible on the Current Jobs or CompletedJobs lists in the Advanced window for those with permission to manage the global report list.

d Select the queries and put them in the order you want them to appear in the report.

e Add any new columns.

4 Advanced reportsAdd or edit filters


2 Select filters and dates.a Click the Filters tab.

b Select beginning and end dates, or specific days of the week for the data you want to view inthe report.

c Select filters from the down‑down lists, then click OK.

Tasks• Use advanced settings to get multiple reports on page 29

Advanced settings allow you to run one report multiple times against additionalparameters. You must have premium features enabled to use this feature.

See also Queries on page 24Add a Favorite report from the Advanced Reports window on page 19

Use advanced settings to get multiple reportsAdvanced settings allow you to run one report multiple times against additional parameters. You musthave premium features enabled to use this feature.Advanced settings for advanced reports act like an advanced query, which allows you to run oneAdvanced report multiple times using either the results of a specified query column or a manual listyou create.


1 Select Reports | Report Console.

2 Click Add, and select Add Advanced from the drop‑down menu.

3 Click the Advanced tab.

4 Select the Run report multiple times using this data checkbox to generate a report for each of the items inyour data set.

5 Configure the advanced options.

6 Click OK and run the report, or schedule the report to run at a later time.

Multiple advanced reports results are available.

Example of an Advanced report using advanced settingsThis feature is useful if you want to view a Top Sites report for each user in your organization.Instead of manually creating multiple Top Sites by Hits reports (one for each user), you cancreate a single Top Sites by Hits report and then select this report to automatically run foreach user.

To do this:

1 Create a query named Top Sites by Hits and any filters you want.

2 Configure an Advanced report.

3 On the Advanced tab of the Add Advanced Report window, select the Run report multiple times using thisdata checkbox.

4 Select either the Results of a query column data set and select the User Name column of anexisting query, or select the Manual list data set to type in a list of users.

Advanced reportsConfigure Advanced reports 4


5 Select how you want the report delivered.

6 Click OK.

McAfee Web Reporter will generate a unique Top Sites by Hits report for each user.

Run an Advanced reportRun an Advanced report when you want view report results instead of waiting for results to appearafter the next scheduled report job.


1 Select Reports | Manage Reports | Report Console.

2 Select a report from the list.

3 Click Run Now.

4 Tabs for configuring report parameters are provided. Configure the dates, format, delivery, andfilters options as needed.


5 Click Run.

The Details pane provides a real‑time status of running and waiting report jobs.

6 Select Reports | Manage Reports | Report Results to view the report.

See also Report language options on page 7

Schedule Advanced reportsSchedule an Advanced report to run automatically and at specific times.

Select the time interval, report format, delivery type, and user you want the report to run as.


1 Select one of the following:

• Reports | Manage Reports | Report Console and in the Details pane, click Add

• Reports | Advanced | Report Schedules and click Add

2 Name the scheduled report.

3 Select Saved advanced report.

4 Configure the options on the available tabs, then click OK.


4 Advanced reportsRun an Advanced report


The report is scheduled and appears in the list on the Report Schedules and Report Console windows.

See also Report language options on page 7

Advanced reportsSchedule Advanced reports 4


4 Advanced reportsSchedule Advanced reports


A Preconfigured queries

McAfee Web Reporter is installed with these preconfigured queries:

Table A-1 Preconfigured queries

Query Name Selected Columns Layout Description

Bandwidth: Volumeby Category

• Bytes

• URL Category

Table Displays each URL category with thevolume in descending order of megabyteswith unlimited results

Bandwidth: Volumeby Category (Chart)

• Bytes

• URL Category

Graph Displays each URL category with thevolume in descending order of megabytesfor the top 30 results

Bandwidth: Volumeby Category (Detail)

• Bytes

• Percent of Bytes

• Hits

• Percent of Hits

• URL Category

Table Displays each URL category with thevolume in descending order of megabytesand includes percent of bytes, number ofhits, and percent of hits details withunlimited results

Bandwidth: Volumeby Day of Week(Chart)

• Bytes

• Day of Week

Graph Displays each day of the week with thevolume in megabytes

Bandwidth: Volumeby Day of Week(Detail)

• Bytes


• Day of Week

• Hits

• Percent of Hits

Table Displays each day of the week with thevolume in megabytes and includes percentof bytes, number of hits, and percent ofhits details

Bandwidth: Volumeby Hour (Chart)

• Bytes

• Hour

Graph Displays each hour of the day with thevolume in megabytes

Bandwidth: Volumeby Hour (Detail)

• Bytes


• Hits

• Percent of Hits

• Hour

Table Displays each hour of the day with thevolume in megabytes and includes percentof bytes, number of hits, and percent ofhits details

Bandwidth: Volumeby Month (Chart)

• Bytes

• Month

Graph Displays each month of the year with thevolume in megabytes


Table A-1 Preconfigured queries (continued)


Bandwidth: Volumeby Month (Detail)

• Bytes


• Hits

• Percent of Hits

• Month

Table Displays each month of the year with thevolume in megabytes and includes percentof bytes, number of hits, and percent ofhits details

Bandwidth: Volumeby Site

• Bytes

• Site Name

• URL Category

Table Displays each site name and correspondingURL category with the volume indescending order of megabytes for the 30most visited sites

Category: Top 20Sites by Volume(Site‑Detail)

• Bytes


• Hits

• Percent of Hits

• Site Name

• URL Category

Table Displays URL categories and site nameswith the volume in descending order ofmegabytes and includes percent of bytes,number of hits, and percent of hits for the20 most visited sites

Category: Usage byHits

• Average Browse Time

• Bytes


• Hits

• Percent of Hits

• URL Category

Table Displays URL categories in descendingorder of hits and includes the percent ofhits, number of megabytes, percent ofbytes, and the average browse time for thetop 100 results

Category: Usage byHits‑Top 20 (Chart)

• Hits

• URL Category

Graph Displays URL categories in descendingorder of hits for the top 20 results

Categories: Usageby Volume


• Percent of Browse Time

• Bytes


• Hits

• Percent of Hits

• URL Category

Table Displays URL categories with the volume indescending order of megabytes andincludes percent of bytes, hits, percent ofhits, percent of browse time, and averagebrowse time for the top 100 results

Category: Usage byVolume‑Top 20(Chart)

• Bytes

• URL Category

Graph Displays URL categories with the volume indescending order of megabytes for the top20 results





Content Categoriesby Hits

• Bytes


• Hits

• Percent of Hits

• URL Category

Table Displays URL categories, hits, percent ofhits, megabytes, and percent of byteslimited to 20 results

Content Categoriesby Volume

• Bytes


• Hits

• Percent of Hits

• URL Category

Table Displays URL categories with the volume indescending order of megabytes andincludes percent of bytes, hits, and percentof hits for the top 20 results

Daily MalwareVolume by LogSource

• Bytes

• Day of Week

• Log Source

• Malware Name

Table Displays log sources with malware data indescending order of megabytes andincludes the day of week for the top 20results

Detail Malware Hitsby Date

• Date

• Hits

• Malware Name

Table Displays malware names by date indescending order of hits for the top 20results

Quarterly TrafficVolume by Year

• Bytes

• Quarter

• Year

Table Displays the year and the quarter of theyear with volume in gigabytes for the top20 results

Risk: Categories byHits

• Hits

• URL Category

Table Displays URL categories in descendingorder of hits and includes percent of hits,megabytes, and percent of bytes withunlimited results

Risk: Categories byHits (Chart)

• Bytes


• Hits

• Percent of Hits

• URL Category

Graph Displays URL categories in descendingorder of hits for the top 200 results

Risk: Categories byVolume

• Bytes


• Hits

• Percent of Hits

• URL Category

Table Displays URL categories with volume indescending order of megabytes andincludes percent of bytes, hits, and percentof hits with unlimited results

Preconfigured queries A




Risk: Categories byVolume (Chart)

• Bytes

• URL Category

Graph Displays URL categories with volume indescending order of megabytes for the top200 results

Risk: Users by Hits • Average Browse Time

• Bytes


• Hits

• Percent of Hits

• URL Category

• User IP

• User Name

Table Displays user names in descending orderof hits and includes user IP address,percent of hits, kilobytes, percent of bytes,average browse time, and URL category forthe top 20 results

Risk: Users byVolume


• Bytes


• Hits

• Percent of Hits

• URL Category

• User IP

• User Name

Table Displays user names with volume indescending order of kilobytes and includesuser IP address, percent of bytes, hits,percent of hits, average browse time, andURL category for the top 20 results





Security: Top 50Users by Hits(Detail)


• Hits

• Percent of Hits

• URL Category

• User IP

• User Name

Table Displays user names in descending orderof hits for URL categories that include thefollowing data:• Anonymizers

• Anonymizing

• Hacking

• Interactive

• Malicious Sites

• P2P

• Parked

• Personal Network

• Phishing

• Remote Access

• Resource Sharing

• Shareware

• Spam URLs

• Spyware

and includes user IP addresses, percent ofhits, and average browse time for the top50 results

Security: Top 50Users by Volume(Detail)


• Bytes


• URL Category

• User IP

• User Name

Table Displays user names with volume inmegabytes for URL categories that includethe following data:• Anonymizers

• Anonymizing

• Hacking

• Interactive

• Malicious Sites

• P2P

• Parked


• Phishing

• Remote Access


• Shareware

• Spam URLs

• Spyware

and includes user IP addresses, percent ofbytes, and average browse time for the top50 results





Security: Usage byHits (Chart)

• Hits

• URL Category

Graph Displays URL categories in descendingorder of hits for categories that include thefollowing data:• Anonymizers

• Anonymizing

• Hacking

• Interactive

• Malicious Sites

• P2P

• Parked


• Phishing

• Remote Access


• Shareware

• Spam URLs

• Spyware

for the top 200 results

Security: Usage byHits (Summary)


• Bytes


• Hits

• Percent of Hits

• URL Category

Table Displays URL categories in descendingorder of hits for that include the followingdata:• Anonymizers

• Anonymizing

• Hacking

• Interactive

• Malicious Sites

• P2P

• Parked


• Phishing

• Remote Access


• Shareware

• Spam URLs

• Spyware

and includes percent of hits, megabytes,percent of bytes, and average browse timefor the top 100 results





Security: Usage byVolume (Chart)

• Bytes

• URL Category

Graph Displays URL categories with volume indescending order of megabytes for the top200 results that include the following data:• Anonymizers

• Anonymizing

• Hacking

• Interactive

• Malicious Sites

• P2P

• Parked


• Phishing

• Remote Access


• Shareware

• Spam URLs

• Spyware

Security: Usage byVolume (Summary)


• Bytes


• Hits

• Percent of Hits

• URL Category

Table Displays URL categories with volume indescending order of megabytes forcategories that include the following data:• Anonymizers

• Anonymizing

• Hacking

• Interactive

• Malicious Sites

• P2P

• Parked


• Phishing

• Remote Access


• Shareware

• Spam URLs

• Spyware

and includes percent of bytes, hits, percentof hits, and average browse time for thetop 100 results





Summary: Hits perHour (Chart)

• Hits ‑ Allowed

• Hits‑Blocked

• Hour

Graph Displays each hour of the day with thenumber of hits allowed and the number ofhits blocked

Summary: Top 10Categories byVolume

• Bytes

• URL Category

Table Displays URL categories with volume indescending order of megabytes for the top10 results

Summary: Top 10Content Types byVolume (Chart)

• Bytes

• Content Type

Graph Displays content types with volume indescending order of megabytes for the top10 results

Summary: Top 10Log Sources byVolume

• Bytes

• Log Source

Table Displays log sources with volume indescending order of megabytes for the top10 results

Summary: Top 10Malicious Sites

• Hits

• Site Name

• Web Reputation

Table Displays site names with web reputationrating of Malicious or Suspicious indescending order of hits for the top 10results

Summary: Top 10Malware Blocks

• Hits ‑ Blocked

• Malware Name

Table Displays malware name in descendingorder of hits that were blocked for the top10 results

Summary: Top 10Sites by BrowseTime

• Browse Time

• Site Name

Table Displays site names in descending order ofbrowse time for the top 10 results

Summary: Top 10Sites by Volume

• Bytes

• Site Name

Table Displays site names with volume indescending order of megabytes for the top10 results

Summary: Top 10Users by BrowseTime

• Browse Time

• User IP

• User Name

Table Displays user names in descending orderof browse time for the top 10 results

Summary: Top 10Users by Volume

• Bytes

• User IP

• User Name

Table Displays user names with volume indescending order of megabytes for the top10 results

Summary:TrustedSource WebReputation (Chart)

• Hits

• Web Reputation

Graph Displays web reputation ratings indescending order of hits for the top 200results

Summary: Volumeper Hour (Chart)

• Bytes

• Hour

Graph Displays each hour of the day with volumein megabytes

TrustedSourceAnti‑Malware Hits(Chart)

• Hits

• Malware Name

Graph Displays malware names in descendingorder of hits for the top 200 results





TrustedSourceAnti‑Malware Hits(Detail)

• Bytes

• Hits

• Malware Name

• Site Name

Table Displays malware names with theoriginating site name in descending orderof hits and includes volume in megabytes

TrustedSourceAnti‑Malware Hits(Summary)

• Bytes

• User Name

• Malware Name

Table Displays the malware names in descendingorder of hits and includes volume inmegabytes

TrustedSourceAnti‑MalwareProtected Users (Top20)

• Bytes

• Hits

• Malware Name

• User IP

• User Name

Table Displays user names, user IP addresses,and malware names in descending order ofhits and includes volume in megabytes

TrustedSourceProtection Area(Chart)

• Hits

• Protection Area

Graph Displays protection areas in descendingorder of hits for the top 200 results

TrustedSourceProtection Area(Detail)

• Bytes

• Hits

• Protection Area

• Site Name

Table Displays site names with the correspondingprotection area in descending order of hitsand includes volume in megabytes for thetop 100 results

TrustedSourceProtection Area(Summary)

• Bytes

• Hits

• Protection Area

Table Displays protection areas in descendingorder of hits and includes volume inmegabytes with unlimited results

TrustedSourceProtection AreaUsers (Top 20)

• Bytes

• Hits

• Protection Area

• User IP

• User Name

Table Displays user names with thecorresponding protection area indescending order of hits and includes userIP addresses and volume in megabytes forthe top 20 results

TrustedSource WebReputation (Chart)

• Hits

• Web Reputation

Graph Displays web reputation ratings indescending order of hits for the top 200results

TrustedSource WebReputation (Detail)

• Bytes

• Hits

• Site Name

• Web Reputation

Table Displays site names with correspondingweb reputation ratings when Malicious orSuspicious in descending order of hits andincludes volume in megabytes for the top100 results





TrustedSource WebReputation(Summary)

• Bytes

• Hits

• Web Reputation

Table Displays web reputation ratings indescending order of hits and includesvolume in megabytes with unlimitedresults

TrustedSource WebReputation ProtectedUsers (Top 20)

• Bytes

• Hits

• User IP

• User Name

• Web Reputation

Table Displays user names with correspondingweb reputation ratings when Malicious orSuspicious in descending order of hits andincludes user IP addresses and volume inmegabytes for the top 20 results

Web Browsing: Top30 Users

• Browse Time

• URL Category

• User Name

Table Displays user names with URL category indescending order of browse time for thetop 30 results



B Preconfigured filters

Four preconfigured filters in McAfee Web Reporter include the selected categories in a report.Preconfigured filters are shared across all reporting users and administrators.

Table B-1 Preconfigured filters

Filter Risk Group Categories

BandwidthMedia

Bandwidth • Internet Radio/TV • Streaming Media

• Media Downloads • Web Ads

• Media Sharing

Productivity Productivity • Auctions/Classifieds

• Blogs/Wiki

• Entertainment

• Fashion/Beauty

• Games

• Humor/Comics

• Job Search

• Marketing/Merchandising

• Mobile Phone

• Online Shopping

• Personal Pages

• Politics/Opinion

• Real Estate

• Recreation/Hobbies

• Religion/Ideology

• Restaurants

• Sports

• Stock Trading


Table B-1 Preconfigured filters (continued)

Filter Risk Group Categories

Risk Liability • Potential Criminal Activities

• Gambling

• Hate/Discrimination

• Historical Revisionism

• Potential Illegal Software

• Incidental Nudity

• Nudity

• Pornography

• Visual Search Engine

Security Security • Anonymizers

• Anonymizing Utilities

• Browser Exploits

• Potential Hacking/Computer Crime

• Interactive Web Applications

• Malicious Downloads

• Malicious Sites

• P2P/File Sharing

• Parked Domain

• Personal Network Storage

• Phishing

• PUPs

• Remote Access


• Shareware/Freeware

• Spam URLs

• Spyware/Adware/Keyloggers

B Preconfigured filters


C Preconfigured Advanced reports

McAfee Web Reporter is installed with these are the preconfigured advanced report definitions:

Table C-1 Preconfigured Advanced report definitions

Advanced ReportDefinition Name

Selected queries Selected filters Description

Bandwidth ‑ MediaSites

• Bandwidth: Volume by Category

• Bandwidth: Volume by Site

• Bandwidth: Volume by Category(Chart)

• Bandwidth: Volume by Category(Detail)

Bandwidth Media Displays the number ofmegabytes for URL categoriesand websites in the Bandwidthrisk group

Bandwidth ‑ Volumeby Time

• Bandwidth: Volume by Month (Chart)

• Bandwidth: Volume by Month(Detail)

• Bandwidth: Volume by Day of Week(Chart)

• Bandwidth: Volume by Day of Week(Detail)

• Bandwidth: Volume by Hour (Chart)

• Bandwidth: Volume by Hour (Detail)

None — all datamatching the querieswill display in thereport

Displays the number ofmegabytes for various timeperiods

Category ‑ Top 20Sites by Volume(Site‑Detail)

Category: Top 20 Sites by Volume(Site‑Detail)


Displays the number ofmegabytes for websites in 20different URL categoriesconfigured in the advancedsettings of the report

Category ‑ UsageSummary

• Category: Usage by Hits‑Top 20(Chart)

• Category: Usage by Hits

• Category: Usage by Volume‑Top 20(Chart)

• Category: Usage by Volume


Displays usage information forURL categories found in your logfile data

Content Categoriesby Hits

Content Categories by Hits None — all datamatching the querieswill display in thereport

Displays hits and number ofmegabytes for URL categoriesfound in your log file data


Table C-1 Preconfigured Advanced report definitions (continued)



Content Categoriesby Volume

Content Categories by Volume None — all datamatching the querieswill display in thereport

Displays number of megabytesand hits for URL categoriesfound in your log file data

Daily MalwareVolume by LogSource

Daily Malware Volume by Log Source None — all datamatching the querieswill display in thereport

Displays number of megabytes,log source, and time periods formalware data found in your logfiles

Detail of MalwareHits by Date

Detail Malware Hits by Date None — all datamatching the querieswill display in thereport

Displays number of hits anddates for malware data found inyour log files

Non‑Productive WebBrowsing by User

Web Browsing: Top 30 Users Productivity Displays browse time and usernames for URL categories foundin your log file data

Quarterly TrafficVolume by Year

Quarterly Traffic Volume by Year None — all datamatching the querieswill display in thereport

Displays number of gigabytesper year and quarter of the year

Risk ‑ LegalExposure Summary

• Risk: Categories by Hits (Chart)

• Risk: Categories by Hits

• Risk: Users by Hits

• Risk: Categories by Volume (Chart)

• Risk: Categories by Volume

• Risk: Users by Volume

Risk Displays the number of hits andmegabytes, percent of hits andmegabytes, average browsetime, and user nameinformation for websites in theLiability risk group

Security ‑ UsageSummary

• Security: Usage by Hits (Chart)

• Security: Usage by Hits (Summary)

• Security: Top 50 Users by Hits(Detail)

• Security: Usage by Volume (Chart)

• Security: Usage by Volume(Summary)

• Security: Top 50 Users by Volume(Detail)

Security Displays the number of hits andmegabytes, percent of hits andmegabytes, average browsetime, and user nameinformation for websites in theSecurity risk group






Summary ‑Overview of AllActivity

• Summary: Top 10 Sites by Volume

• Summary: Top 10 Users by Volume

• Summary: Top 10 Malware Blocks

• Summary: Top 10 Malicious Sites

• Summary: Volume per Hour (Chart)

• Summary: Hits per Hour (Chart)

• TrustedSource Web Reputation(Chart)

• Summary: Top 10 Content Types byVolume (Chart)

• Summary: Top 10 Sites by BrowseTime

• Summary: Top 10 Users by BrowseTime

• Summary: Top 10 Categories byVolume

• Summary: Top 10 Log Sources byVolume


Displays the number of hits andmegabytes for user information,malware data, reputationratings, time periods, websites,and URL categories

Preconfigured Advanced reports C





TrustedSourceSummary

• TrustedSource Anti‑Malware Hits(Chart)

• TrustedSource Anti‑Malware Hits(Summary)

• TrustedSource Anti‑Malware Hits(Detail)

• TrustedSource Anti‑MalwareProtected Users (Top 20)

• TrustedSource Protection Area(Chart)

• TrustedSource Protection Area(Summary)

• TrustedSource Protection Area(Detail)

• TrustedSource Protection Area Users(Top 20)


• TrustedSource Web Reputation(Summary)

• TrustedSource Web Reputation(Detail)

• TrustedSource Web ReputationProtected Users (Top 20)


Displays the number of hits andmegabytes, user information,and websites forTrustedSourcedatabase malware data,reputation ratings, andprotection areas

TrustedSourceAnti‑MalwareSummary

• TrustedSource Anti‑Malware Hits(Chart)

• TrustedSource Anti‑Malware Hits(Summary)

• TrustedSource Anti‑Malware Hits(Detail)

• TrustedSource Anti‑MalwareProtected Users (Top 20)


Displays the number of hits andmegabytes, user information,and websites for TrustedSourcedatabase malware data






TrustedSourceProtection AreaSummary

• TrustedSource Protection Area(Chart)

• TrustedSource Protection Area(Summary)

• TrustedSource Protection Area(Detail)

• TrustedSource Protection Area Users(Top 20)


Displays the number of hits andmegabytes, user information,and websites for TrustedSourcedatabase protection areas

TrustedSourceReputationSummary


• TrustedSource Web Reputation(Summary)

• TrustedSource Web Reputation(Detail)

• TrustedSource Web ReputationProtected Users (Top 20)


Displays the number of hits andmegabytes, user information,and websites for TrustedSourcedatabase reputation ratings

Preconfigured Advanced reports C


Index

Aabout this guide 5actions

translation 7Administration

menu 10

advanced reportresults 30

run now 30

advanced reportsconfigure 28

create a favorite 19

custom 23

definitions 23

multiple reports 29

parts of 23

preconfigured 23

results of a query column 29

run multiple times 29

save a custom report 17

scheduled 30

toolbar 11

user-configured 23

Ccategories

preconfigured filters 43

translation 7charts 25

column properties 27

conventions and icons used in this guide 5Custom Quick View report

results per page 13

custom reports 16–18

about 15

as advanced report 17

create, view 16

details 20

drilldown links 20

favorite 18

filters 16

reputation, view 20

save as advanced 17

custom reports 16–18 (continued)save as favorite 18

schedule 21

send 20

site, view 20

tabbed reports 19

view 20

Ddate format 9, 14

datestranslation 7

decimal separator 13

directorieslogon 9

documentationaudience for this guide 5product-specific, finding 6typographical conventions and icons 5

drilldown links 20

Eemail

default settings 12

Ffavorite reports

about 15

details 20

drilldown links 20

reputation, view 20

save custom 18

schedule 21

send 20

site, view 20

tabbed reports 19

view 20

favoritessave 18, 19

send 21

filters 27

about 25

add 28


filters 27 (continued)descriptions 25

edit 28

new for custom reports 16

preconfigured 27

categories 43

descriptions 43

risk groups 43

query-level 27

toolbar 11

TrustedSource 27

types 25

Ggraphs

bar charts 25

columns 25

group by 25

list per group 25

pie charts 25

x-axis 25

group bycolumns 25

x-axis 25

HHTTP

logon URL 9HTTPS

logon URL 9

Llanguages

data 7report fields 7

list per group 25

logon 9profile settings 9

logon URL 9

MMcAfee ServicePortal, accessing 6McAfee Web Reporter

logon 9menus 10

Administration 10

My Profile 10

Quick View 10

Reports 10

My Profile 9Custom Quick View report results 13

date format 14


My Profile 9 (continued)default report 15

default risk group 15

email settings 12

menu 10

number format 13

number of results 13

password 14

recipient address 12

sender address 12

summary report, default 15

thousands separator 13

time format 14

Nnumber format 9



number of results 9, 13

Ppassword 9

change 14

preconfiguredadvanced reports 23

filters 27

queries 24

preferencesCustom Quick View report results 13

date format 14


email 12

number format 13


password 14

profile settings 9recipient address 12

risk group, default 15

sender address 12



time format 14

profileabout 9settings 9

profile settingsdate format 14


email 12, 13

number format 13


password 14

recipient address 12

risk group, default 15

Index


profile settings (continued)sender address 12



time format 14

protection areastranslation 7

Qqueries

charts 25

column properties 27

columns 25

configure 27

data type 27

filters 27

graphs 25

group by 25

layout 25, 27

list per group 25

preconfigured 24

query type 27

tables 25

x-axis 25

y-axis 25

query-level filters 27

Quick Viewabout 15

custom reports 16

details 20

drilldown links 20

filters 16

menu 10

reputation, view 20

save as 18

save as advanced report 17

save favorites 18, 19

schedule 21

send 20

site, view 20

summary reportdefault 15

tabbed reports 19

toolbar 11

view 16, 20

Rrecipient address 9, 12

report fieldstranslation 7

reportsfilters

about 25

add 28

reports (continued)

categories 43

create 27

custom 27

edit 28

preconfigured 27, 43

risk groups 43

types 25

multiple advanced reports 29

queriesconfigure 27

layout 27

results 30

run now 30

scheduled 30

send favorites 21

send Quick View 20

translation 7Reports

menu 10

reputationtranslation 7view from Quick View 20

results field, default number 13

results of a query column 29

risk groupsdefault 15

preconfigured filters 43

run now 30

run report multiple times 29

Sscheduled reports

create 30

run now 30

send favorite reports 21

send reports 20

sender address 9, 12

ServicePortal, finding product documentation 6site, view 20

summary reportsabout 15

default 9, 15

details 20

drilldown links 20

profile settings 9reputation, view 20

send 20

site, view 20

tabbed reports 19

view 16, 20

Ttabbed reports 19

Index


Technical Support, finding product information 6thousands separator 13

timeformats

translation 7translation 7

time format 9, 14

toolbars 11

advanced reports 11

filters 11

number of results, default 13

options 11

Quick View 11

translationdata 7languages 7report fields 7

TrustedSourcein preconfigured filters 27

Uuser interface 9

Administration menu 10See also McAfee Web Reporter Product Guide

user interface 9 (continued)logon 9menu bar 10

My Profile menu 10

navigation bar 10

permissions 9Quick View menu 10

Reports menu 10

toolbars 11

Vview site 20

view site reputation 20

Wwhat's in this guide 6

Xx-axis 25

Yy-axis 25

Statistics column 25

Index


mcafee web reporter 5.2 · pdf filemcafee® web reporter (web reporter) is a powerful...

Documents