Add automated reports

You can add a scheduled report template which enables you to schedule a new report that generates automatically and emailed regularly. You can schedule a report for any of the IPS Reports and Configuration Reports. When you schedule a report, you need to specify the parameters for the report (Example: Admin Domain, Sensor).

To schedule a report:

1. Click the Manager icon from the Home page.
2. Select <Admin Domain Name> → Reporting → Report Automation → Automation Settings.
   The Automation Settings page is displayed.
3. Click .
   The Add an Automated Report page is displayed.
   The Enable? field is enabled by default.
   1. Select the Report Category — IPS Events or Configuration Reports.
   2. Select the Report Type. Based on this selection, the template fields change to fit the elements of the selected report. Only those fields that are common to all report types are described in this section.
      • Traditional-IPS Event reports
        • Big Movers report
        • Executive Summary report
        • Reconnaissance Attacks report
        • Top N Attacks report
        • Trend Analysis report
        • User Defined report
      • Traditional-Configuration reports
        • Attack Set Profile report
        • Device Summary Report
        • Faults report
        • Firewall Policy Definitions report
        • IPS Policy Assignment report
        • IPS Policy Details report
        • IPS Sensor report
        • Licenses
        • NTBA Appliance report
        • NTBA Configuration Summary report
        • Performance Monitoring - Admin Domain Configuration report
        • Performance Monitoring - Sensor Configuration report
        • QoS Policy
        • Reconnaissance Policy report
        • Scanning Exceptions
        • User Activity report
        • Version Summary
   3. For Configuration reports
      • Type a Template Name.
      • Type a Description that summarizes the report. The maximum length is 254 characters. This is for future reference.
      • Choose a Report Frequency as either Hourly, Daily, Weekly or Monthly. The default is Weekly.
      • Select a required Attack Set Profile.
      • Select Report Format. The options are:
        • PDF Portrait
        • PDF Landscape
        • Save as HTML
        • Save as CSV

      For IPS Events

      • Type a Template Name.
      • Type a Description that summarizes the report. This is for future reference.
      • Choose a Report Frequency as either Hourly, Daily, Weekly or Monthly. The default is Weekly.
      • Select the Admin Domain.
      • Select a device in the Sensor.
        • Select All Devices to displays all devices.
        • Select By Device to display individual devices.
        • Checking the check box for Include Child Admin Domains displays all the devices in the child domain (By default the check box is unchecked).
      • Attack Severity — Select one or more from the Informational, Low, Medium, or High severities which relate to attack impact.
      • Ranking Basis — Select one of the following:
        • Percentage change in attack count
        • Change in attack account value
      • Direction — Select one of the following directions of how alerts occurred should be displayed:
        • Upward Movers only
        • Upward and Downward Movers
        • Downward Movers only
      • Maximum Movers — Enter the value of maximum occurred alerts to be displayed.
      • Comparison Interval — Enter the time period. The time period is in days.
      • Select Report Format. The options are:
        • PDF Portrait
        • PDF Landscape
        • Save as HTML
        • Save as CSV

        Note

        The PDF option appears disabled if you had selected the Report Frequency as Monthly.

   4. Click Next. The Select Recipients page appears.
   5. Select the recipients from the grid.
   6. Click Finish.