How do I create a browsing report thats easy for a CEO to read...

[tezza]

Hi,

I have been tasked with creating a report out of our Palo Alto firewall that shows the following.

For a period of 1 month

Users Hours\Sessions on a website

Top 20 visited websites.

Top 20 Categories.

We are using the user agent so all the data should be there, I can see some of it but getting this into a format that easy to read for a CEO?

Can someone please help me?

[HULK]

Hello Tezza,

You can create a custom report Under GUI > Monitor > Manage Custom Reports, as mentioned below.

Time Frame: Last 30 days

Short by: Session

Group By- Category

Add from available columns

>>>>> Then run the report and save it as a PDF. I hope this type of PDF will be ok to send to your CEO.

Step:-1

Step:-2

Hope this helps.

Thanks

[Remo]

As far as I know (@community: correct me if I am wrong), your report with the top 20 visited sites will not be possible out of the box. This is because in the url field of the logs you have the full url. So for example for every search on google of a user you have a different url log entrywith different url's. To make this report usable you have to extract only the FQDN from the log and create the report with this data. This could be done for example with splunk.

For the other report with the spent time on a website it's kind of the same. To create this, you need to link the url log entry with the session start and end entries from the traffic log. But even then the report will not produce reliable output, because the session in the browser of a user could remain open even the user is not looking at the website anymore and is now doing something else on his computer.