Sophos WS100 User Manual

■
Excluded: files that were not sent for analysis due to policy settings.
■
Total: the total number of files that were flagged as suspicious.
Click on a username or IP address to view a Search > By User of all URLs blocked by the policy.
The available search parameters vary from one report to another. See “Modifying Reports” for a
description of each parameter.
5.1.6 Users: PUA Downloaders
By default, a pie chart of the top five PUA downloaders, plus all others, each shown as a percentage
of the total number of PUAs downloaded today since midnight.The data table shows the following:
■
Full list of users who downloaded PUAs during the reporting period. If your Web Appliance is
configured to access a single-domain Active Directory server, only the username of each user
is displayed; if the Web Appliance is configured to access the global catalog of a multidomain
Active Directory forest, users are displayed in the form "domain\username". Usernames for
eDirectory are specified in the form user.context.
■
IP addresses to which they downloaded PUAs.
■
count of PUAs downloaded.
■
Top five PUAs (maximum) downloaded by each user.
Click on a username or IP address to view a Search > By User of all URLs blocked due to PUAs.
The available search parameters vary from one report to another. See “Modifying Reports” for a
description of each parameter.
5.1.7 Users: High Risk Site Visitors
By default, a pie chart of the top five high risk site visitors, plus all others, each shown as a
percentage of the total number of high risk sites visited today since midnight.The data table shows
the following:
■
full list of users who visited high risk sites during the reporting period. If your Web Appliance
is configured to access a single-domain Active Directory server, only the username of each
user is displayed; if the Web Appliance is configured to access the global catalog of a
multidomain Active Directory forest, users are displayed in the form "domain\username".
Usernames for eDirectory are specified in the form user.context.
■
IP addresses from which they browsed high risk sites.
■
Count of the high risk sites visited.
Click on a username or originating IP address to view a Search > By User of all URLs blocked
because they are high risk sites.
The available search parameters vary from one report to another. See “Modifying Reports” for a
description of each parameter.
Sophos Web Appliance | Reports | 159

Sophos WS100 Specifications

General

Brand	Sophos
Model	WS100
Category	Firewall
Language	English