Untangle Reports

Untangle Reports Overview:

Reports provide administrators the visibility and data necessary to investigate security incidents and enforce acceptable network usage policies.

• Interactive Drilldowns
• Monitor behavior at the user, host, email and incident level
• Understand traffic flows and network usage patterns
• Fully exportable incident information in CSV format
• Share reports in PDF or HTML formats

Visibility is the first step in controlling your network, identifying misuse, and enforcing your network usage policy. Reports provide this visibility and are also a great tool for troubleshooting.

You’ll get daily reports about the activity in your network and each Untangle software application. How many viruses and spam were blocked? Which phish were caught? What Websites were visited?

Untangle Reports can be delivered via email or viewed on the Web.

Key Features:

• Open Source & Free under the GNU General Public License (GPL)
• Summary, detail, and per user reports
• Automated email report delivery
• Report archive

Technical Specifications:

The Untangle Server Software logs events to a database. Reports compiles daily activity based on the information in the database and aggregates it into useful information across different categories.

Reports stores old reports for 30 days. You can email these reports to other users and view them in your browser. Reports provides reports in the following file formats:

• PDF
• HTML

What It Does

Generates reports on the network activity that passes through your Untangle Server

How It Does It

Uses numerous open source tools and Untangle custom components and interface

Controls

• Reports have "vital statistics" summaries
• Reports have "Key Statistics" summaries
• Reports have incident-based details
• User-specific reports are available via:
  • Active Directory integration
  • IP Address to User map
• Reports can be automatically emailed to designated recipients
• Reports daily, weekly and monthly delivery schedules can be customized

Media:

Video:

Video: Untangle 7.0 Reports (11 minutes)

Reports FAQs:

Why am I not receiving Untangle Reports?

• In order to receive reports, you must have Software Products installed in the virtual rack and turned on. Go to Turning On and Off Software Products.
• If your Untangle Server is turned on, its possible that the reports have not yet been sent. Reports are emailed on a daily basis. Wait up to 24 hours to receive your first report email. Go to Specifying When Untangle Server Generates Untangle Reports.
• If you have been using the Untangle Server for more than 24 hours, verify that you configured the Untangle Server with your outgoing mail server settings. Go to Configuring Server Email Traffic.

Why are my Untangle Report emails so large in size?

Your Untangle Report emails might contain the Detailed report, which can be 350+ pages. To stop receiving the Detailed report, go to Specifying Contents of Untangle Report Emails.

Why am I not receiving the Detailed Report through email?

If you are receiving the Briefing report but not the Detailed Report, you do not have the Detailed Report enabled for email distribution. Go to Specifying Contents of Untangle Report Emails.

What is the difference between event logs and Untangle Reports?

Event logs contain the underlying data from which the Untangle Server generates Untangle Reports. However, there are a few differences. Event logs provide real-time information whereas Untangle Reports provide next-day information. Moreover, the event logs show activity by IP address; Untangle Reports are more user-friendly because they show activity by user.

Can I send Untangle Reports to anyone?

Yes, as outlined in Emailing Recipients Untangle Reports, you can email reports to anyone. That user does not need administrator privileges. There is no limit on the number of users that receive the Untangle Reports.

I just upgraded my Untangle box from version 5.0 to version 5.1 My reports are missing. Why?

The next time that scheduled reports are run, the top-level report index gets rebuilt according to the new standard. If you run reports daily, please allow 24 hours before reports are available. If you only run weekly or monthly reports (and not daily), please allow one reporting cycle.

Hardware Requirements:

• The Untangle Server requires a dedicated PC installed at the gateway to your network.
• Your hardware does not need an operating system - the Untangle Server installs its own operating system.
• The Untangle Server software completely erases any content or data that may exist on your PC hard drive.

Sizing Guidance

Recommended Configurations (New Hardware)

When purchasing new hardware, spending a couple of extra dollars to meet the following recommended configurations provides the best value.

Resource	Up to 50 Users	Up to 100 Users	Up to 300 Users
Intel/AMD-compatible Processor	Pentium 4 equivalent or greater	Dual Core	Dual Core
Memory	1 GB	1 GB	2 GB
Hard Drive	80 GB	80 GB	80 GB
NIC's	2 (3 for DMZ)	2 (3 for DMZ)	2 (3 for DMZ)

Verified Configurations (Trials, Refurbished or Repurposed Hardware)

These are the lowest verified hardware configurations that provide reliable and#8212; albeit sometimes slower and#8212; performance in production. However, it may be possible for organizations with lower than average network traffic or organizations that do not wish to use all of the modules to run Untangle on smaller systems.

Resource	Up to 50 Users	Up to 100 Users	Up to 300 Users
Intel/AMD-compatible Processor	800 MHz	1.2 GHz	1.6 GHz
Memory	512 MB	1 GB	2 GB
Hard Drive	20 GB	30 GB	40 GB
NIC's	2 (3 for DMZ)	2 (3 for DMZ)	2 (3 for DMZ)