Symantec 10521146 Administration Guide - Page 235

Reporting 235 About top-level report types Table 9-4 Types of event reports Type Description Event list by destination IP This report lists all events by destination IP address for all devices and interfaces in the network topology. You can generate drill-down event lists by destination IP from Top Event Destinations. Event list by source IP This report lists all events by source IP address for all devices and interfaces in the network topology. You can generate drill-down event lists by source IP from Top Event Sources. Reports per Network Security device Symantec Network Security generates the following types of device reports: Table 9-5 Types of device reports Type Network Security login history Network Security operational events Devices with flow statistics Description This report lists the user login times, IP addresses from which the user logged in, and the type of user that logged in, either a SuperUser with full read/write privileges, or one of the other user login accounts with limited permissions. Specify the report start and end dates/times. This report is generated in table format only. This report has no drill-down reports. This report lists operational events such as user logins, communication errors, response actions, and license status notifications. This report allows you to drill-down to event details. This report lists names for devices on which the Flow Status Collection sensor mode is enabled, and the number of the software or appliance node where the sensor is located. Symantec Network Security generates this report in table format only. With a SuperUser, Administrator, or StandardUser account, you can generate several drill-down reports for details on sources and destination IP addresses and ports for the flows, as well as flow protocols. Note: SuperUsers, Administrators, and StandardUsers can generate reports from devices with flow statistics; RestrictedUsers cannot. See "User groups reference" on page 319 for more about permissions.