This idea might be a little strange so I apologize if it isn't completely clear. Currently, we get a daily PDF report from our PAs that include items like the top 5 egress interfaces, threats, etc. Our security team has been interested in these reports lately and I have been reviewing the findings with them on a daily basis. I feel that most of our reports are nearly identical most days and it makes for a meaningless meeting everyday. For this reason, I was wondering if there is some kind of way to get a report that shows me if there is a deviation from the average day to day reports. For example, most days our report for top 5 egress interfaces is the same, in the same order (for bytes transmitted). Most of our other reports are like this too. Is there a way to only be sent a report if numbers 2 and 3, for example, on the list were swapped or if a completely new interface shows up on the report that day, instead of getting the same report everyday? My thought is no and we will probably have to utilize the API to pull the data and script something on our side with that data. Before we did that though I wanted to reach out and find out if there are any ideas or thoughts that could help us before we take the API road. Thanks in advance for your thoughts and help!
... View more