Home

GFI ESECMCREN1000-2999-2Y network monitoring software

1. Date Time Select the date time periad on which to base the report Reports based on date and time will gather the events occured during the selected time period and will generate results based on information Found within this specified time interval Relative Cancel Screenshot 20 Report Scheduling Wizard Data set selection dialog 3 Select the device usage period to be covered by this report Schedule Report Wizard Time Schedule Specify the time schedule to be used to automatically generate the report Scheduled reports can be generated either once using a specific date and time or else re generated using a time frame starting from a specific time C2 Generate this repart once an the following daytime Generate this report every Start date time 9 16 2009 12 00 00 AM Cancel Screenshot 21 Report Scheduling Wizard Time schedule dialogue 4 Specify the report scheduling parameters date time frequency Click on Next to continue 30 e Scheduling reports GFI ReportCenter Schedule Report Wizard Advanced Settings Customize report distribution and storage options ou can send the generated report by email to a target recipient list or save the generated report in a folder on your file system Click on the Settings button of the relevant section in the dialog to further configure repart sending saving options Export to file Sg Click on the Settings button to customize the report
2. 5 4 Viewing the list of scheduled reports 5 5 Viewing the scheduled reports activity 5 6 Enable disable a scheduled report o Editing a scheduled report 5 8 Deleting a scheduled report 5 9 Example Scheduling a report 6 Configuring default options 6 1 Introduction 6 2 Configuring database source 6 3 Viewing the current database source settings 6 4 Configuring default scheduling settings 7 General options 7 1 Entering your license key after installation GFI ReportCenter Contents e i 7 2 7 3 Viewing product ReportPack s version details Checking the web for newer builds 8 Appendix GFI EndPointSecurity Default Reports 8 1 8 2 8 3 8 4 8 5 Executive Reports Statistical Reports Top active users machines reports Technical Reports Security reports 9 Troubleshooting 9 1 9 2 9 3 9 4 9 5 Index Contents e ii Introduction Knowledge Base Web Forum Request technical support Build notifications 48 48 51 51 54 56 59 61 61 61 61 61 62 63 GFI ReportCenter 1 Introduction 1 1 About GFI ReportCenter Print generated report Email generated Gh Product3 report Figure 1 Centralized reporting framework GFI ReportCenter is a centralized reporting framework that allows you to generate various reports using data collected by different GFI products GFI releases specialized reports for each of its products referred to as a ReportPack for example the GFI EndPoin
3. GFI EndPointSecurity 4 2 ReportPack Manual By GFI Software Ltd http www gfi com Email info gfi com Information in this document is subject to change without notice Companies names and data used in examples herein are fictitious unless otherwise noted No part of this document may be reproduced or transmitted in any form or by any means electronic or mechanical for any purpose without the express written permission of GFI SOFTWARE Ltd GFI EndPointSecurity Report Pack Last updated 25 September 2009 Version number ESECRP ACM EN 01 00 00 Contents 1 Introduction 1 1 About GFI ReportCenter 1 2 About the GFI EndPointSecurity 4 0 ReportPack 1 3 Components of the GFI EndPointSecurity 4 0 ReportPack 1 4 Key features 2 Installation 2 1 System requirements 2 2 Installation procedure 2 3 Launching the GFI EndPointSecurity reports for GFI ReportCenter 2 4 Selecting a product 3 Getting started Default reports 3 1 Introduction 3 2 Generating a default report 3 3 Analyzing the generated report 3 4 Adding default reports to the list of favorite reports 4 Custom reports 4 1 Introduction 4 2 Creating a new custom report 4 3 Configuring data filter conditions 4 4 Run a custom report 4 5 Editing a custom report 4 6 Deleting a custom report 4 7 Adding custom reports to the list of favorite reports 5 Scheduling reports 5 1 Introduction 5 2 Scheduling a report 5 3 Configuring advanced settings
4. E Screenshot 55 Sample report device based technical report o The category to which a device belongs Device description List of events in chronological order 8 4 5 Detailed device activity listing Detailed device activity listing report shows 58 e Appendix GFI EndPointSecurity Default Reports GFI ReportCenter e All the technical details available for every activity reported by GFI EndPointSecurity Agents Event ID Date Time Eventtype Username Machine Access request Process ID Process name Accessed path 530 9 3 2009 12 22 38PM Device name ASUS DVD ES818A2T Device descriptior 0 Read Only allowed Category Ciro Connection port Internal Vendor name ASUS WY 2003ENTIhAdministrator V2003ENTII Read Permissions 2 848 CANWINDOWVWSYExplorer EXE S Real file type Screenshot 56 Sample report detailed device activity listing report LL M 8 5 Security reports GFI ReportCenter 8 5 1 Users who accessed devices on more than one machine This report shows a list of users accessing devices on different machines f WESECDORMICTristiB Computers 3 CB CBG CBz VWESECDOM Fullaccess Computers 3 CBE CB1 CB2 ESECDORTHoAccess Computers 3 CB2 CBG CB1 WNT AUTHORITYSYSTEM Computers 4 CB10 CB2 CBG CB Screenshot 57 Sample report users who accessed devices on multiple computers o User accessing devices Computer used to access
5. Scheduling reports e 33 1 From the Advanced Settings dialog click on the Settings button underneath the Send by email option Email Alerts Options Email Uptions Tou can overde the default email options Far this scheduled report Override the default email options For this report Tu administratorte masterdamain com CL From ghireparteenterteimasterdomain com _ SMTP Server requires login Report format Adobe Acrobat pdf we Screenshot 26 Report distribution options 2 Select Override the default email options for this report 3 Specify the following parameters e To CC Specify the email address es where the generated report will be sent e From Specify the email account that will be used to send the report e Server Specify the name IP of your SMTP outbound email server If the specified server requires authentication select option SMTP Server requires login and specify the logon credentials in the User name and Password fields e Report format Reports are sent via email as attachments Select the file format in which to send out your report 4 Click OK to finalize your configuration settings 34 e Scheduling reports GFI ReportCenter 5 4 Viewing the list of scheduled reports GFI ReportCenter GFI ReportCenter 3 6 File Tools Help cea Scheduled reports list Product Selection Schedule Name Report Name Last Generation Bm GFI EndPointSecurity 4 2
6. View and analyze generated reports Maintain the scheduled reports list Explore samples and descriptions of default reports Export Use this button to export generated reports to various formats D including HTML Adobe Acrobat PDF Excel XLS Word DOC and Rich Text Format RTF qx email Use this button to instantly distribute the last generated report via email GFI EndPointSecurity 4 2 default reports The GFI EndPointSecurity 4 2 default reports are a collection of specialized pre configured reports which plug into the GFI ReportCenter framework These reports present the portable device usage activity recorded by GFI EndPointSecurity and allow for the generation of both graphical and tabular IT Level technical and management reports Default reports can also serve as the base template for the creation of customized reports which fit specific network reporting requirements Report scheduling service The report scheduling service controls the scheduling and automatic distribution of reports by email Reports generated by this service can also be saved to a specific hard disk location in a variety of formats which include DOC PDF RTF and HTML 1 4 Key features Centralized reporting GFI ReportCenter is a one stop centralized reporting framework which enables the generation and customization of graphical and tabular reports for a wide array of GFI Products Wizard assisted configuration Wizards are pr
7. WESECDOMMF ullAccess WESECDOM MF ullAccess WESECDOM F ullAccess USB Device USB Device USB Device USB Device USB Device USB Device USB Device USB Device USB Device USB Device USB Device USB Device USB Device USB Device USB Device USB Device Screenshot 59 Sample report connected devices outside working hours o Events occurred outside working hours 8 5 4 Connected devices during weekends This report shows devices connected during the weekends 1 9 2009 10 33102 M 1 9 2009 10 33 02AM 1 9 2009 10 3302AM 1 9 2009 10 3302AM 1 9 2009 10 33 02AM 1 9 2009 10 33 02AM 1 9 2009 10 33 02AM 1 9 2009 10 33 02AM 1 9 2009 2 20 14PM 1 9 2008 2 20 14PM 1 9 2009 2 20 14PM 1 9 2009 2 20 14PM 1 9 2008 2 20 14PM 1 9 2009 2 20 14PM 1 9 2009 2 20 14PM 1 8 2008 2 20 14PM WESECDOMMF ullAcces WESECDOMVMF ullAccess WESECDOM F ullAccess WESECDOMVMF ullAccess WESECDOMMF ullAcces WESECDOMVMF ullAccess WESECDOMVMF ullAccess WESECDOMVMF ullAccess WESECDOM MF ullAcces WESECDOMFullAcoez WESECDOM F ullAccess WESECDOMVMF ullAccess WESECDOMMF ullAccess WESECDOMVMF ullAccess WESECDOMVMF ullAccess WESECDOMVMF ullAccess Screenshot 60 Sample report connected devices during weekends Events occurred during weekends 60 Appendix GFI EndPointSecurity Default Reports USB Device USB Device USB Device USB Device USB Device USB Device USB Device USB Device USB Device USB Device USB Device USB Device USB Device USB D
8. Information GFI EndPaintS ecurity 4 2 HeportPack Copyright c 2000 2010 GFI Software Ltd GFI EndPaintS ecurity 4 2 FiepartPack There is no newer build available Version 4 2 Build 20090907 Check for latest version on website Build Updates _ Check for newer builds on startup Screenshot 42 Version Properties Check for newer builds dialog 1 Select the respective product for example GFI EndPointSecurity 4 0 ReportPack from the Product Selection drop down list 2 Click on the Options navigation button 3 Right click on the Version Information node and select Check for newer builds NOTE You can configure GFI EndPointSecurity 4 2 ReportPack to check for newer builds on startup GFI ReportCenter General options e 49 8 Appendix GFI EndPointSecurity Default Reports 8 1 Executive Reports 8 1 1 Device Usage Summary The Device Usage Summary is an executive style report that e Provides a usage summary of all controlled devices across the network e Graphically represents the percentage amount of allowed denied access requests e Breaks down activity in device categories to allow comparisons of devices contributing to access requests e Highlights the top 10 users with the largest amount of allowed denied device access Allowed vs Denied device access File System vs Non File System Devices B Allowed m Lesnied IEEE Allowed SJ T2 6 IEEE Deybd 3
9. ReportPack v Device Usage Report Device aga pub m Device access statistics Device access statistics MI Top 20 users Top 20 active users Scheduled Reports S Top D m User based technical data User based technical report GFI EndPointSecurity 4 2 ReportPack Outside working hours Connected devices outside wor Way Scheduled Reports List Scheduled Reports Activity Ye Favorite Reports Default Reports Custom Reports Ma Options Screenshot 27 List of Scheduled reports Click on the Scheduled Reports navigation button to show the list of scheduled reports which are currently configured for automatic generation This information is displayed in the right pane of the management console and includes the following details Schedule Name The custom name that was specified during the creation of the new scheduled report Report Name The names of the default or custom report s that will be generate Last Generated Indicates the date time when the report was last generated Next Sent Indicate the date time when the report is to be next generated Description The description that you have entered for each schedule Scheduling reports e 35 5 5 Viewing the scheduled reports activity GFI ReportCenter 3 6 File Tools Help E Product Selection GFI EndPointSecurity 4 2 ReportPack v Scheduled Reports GFI EndPointSecurity 4 2 ReportPack DA S
10. a ReportPack Favorite Reports Use this navigation button to access your favorite most used reports For more information on how to add reports to this list refer to the Adding default reports to the list of favorite reports and Adding custom reports to the list of favorite reports sections in this manual Default Reports Use this navigation button to access the default list of reports which can be generated for the selected product For more information on default reports refer to the GFI EndPointSecurity default reports section in this manual Custom Reports Use this navigation button to access the list of customized reports which can be generated for the selected product For more information on how to create custom reports refer to the Getting Started Entertaining custom reports section in this manual Scheduled Reports Use this navigation button to access the list of scheduled reports for automatic generation and distribution For more information on how to create scheduled reports refer to the Scheduling of reports chapter in this manual Options Use this navigation button to access the general configuration settings for the GFI product selected in the Product Selection drop down list GFI ReportCenter Introduction e 5 Help Use this navigation button to show this Quick Reference Guide in the Report Pane of the GFI ReportCenter management console Report Pane Use this multi functional pane to
11. com o SMTP server details Win2k3serv To create the scheduled report 1 Click on the Default Reports navigation button 2 Right click on Device Usage Summary and select New Scheduled Report In the welcome dialog click Next Schedule Report Wizard Date Time Select the date time period on which to base the report Reports based on date and time will gather the events occured during the selected time period and will generate results based on information found within this specified time interval Relative Today i Today esterday Last 7 days Last 30 days ho Date range Screenshot 30 Select device usage period 38 e Scheduling reports GFI ReportCenter 3 Select the option Relative and from the provided drop down list select Today Click on Next to proceed to the next dialog 4 Since no data filters will be applied in this example click Next to proceed to the next dialog Schedule Report Wizard Time Schedule Specify the time schedule to be used to automatically generate the report Scheduled reports can be generated either once using a specific date and time ar else re generated using a time frame starting from a specific time C2 Generate this repart ance an the following daytime nero v 3357FM e Generate this report every Start date time 371672009 1200 00 4M gt Screenshot 31 Specifying the scheduling options 5 To generate this report on daily basis sel
12. device activity data collected today yesterday during the last 7 days or over the last 30 days Further to this you can also base your reports on data collected during a particular day month or date time period Example 1 Generating a Device usage summary report based on yesterday s data This example demonstrates how to generate a Device usage summary report based on the data collected by GFI EndPointSecurity during the previous day 1 Click on the Default Reports navigation button to bring up the list of available reports 2 Right click on Device usage summary and select Generate report gt For Yesterday Example 2 Generating a Device usage summary report based on that data collected on a particular day This example demonstrates how to generate a Device usage summary report based on the data collected by GFI EndPointSecurity on September 15 2009 1 Click on the Default Reports navigation button to launch the list of available reports 2 Right click on Device usage summary and select Generate report gt For Custom Date 14 e Getting started Default reports GFI ReportCenter Specify custom date Date Time Select the date time periad on which to base the report Reports based on date and time will gather the events occured during the selected time period and will generate results based on information Found within this specified time interval C5 Relative Tuesday September 15 2009
13. e Report Description This report is generated on a daily basis at 12 00 AM It shows all device usage activity recorded throughout the day 16 Click Next to proceed to the final dialog 17 Click Finish to finalize your custom report configuration settings 42 e Scheduling reports GFI ReportCenter 6 Configuring default options 6 1 Introduction The GFI EndPointSecurity ReportPack allows you to configure a default set of parameters which can be used when generating reports These parameters are first set during installation However you can still reconfigure any of these parameters via the Options navigation button provided in the GFI ReportCenter management console GFI ReportCenter 3 6 Sele File Tools Help E GFi Product Selection SECURITY amp MESSAGING SOFTWARE GFI EndPointSecurity 4 2 ReportPack v GFI EndPointSecurity ReportPack Options Options The GFI EndPointSecurity Options section is used to configure the default options and settings used for generating GFI EndPointSecurity reports The GFI EndPointSecurity 4 2 ReportPack setting include the following j Database Source LE Import Export Configuration e Database Source This option contains information about the Version Information database from which GFI EndPointSecurity reports will be generated P Licensing This database should be the same one that is being used by GFI UEndPointSecurity console Default Scheduling Option
14. every report refer to Appendix 1 in this manual Report customization The default reports that ship with every ReportPack can serve as the base template for the creation of customized reports Report customization is achieved by building up custom data filters which will analyze the data source and filter the information that matches specific criteria In this way you create reports tailored to your reporting requirements Favorites GFI ReportCenter allows you to create bookmarks to your most frequently used reports both default and custom Printing By default all reports generated by GFI ReportCenter are printer friendly and can be printed through the windows printing services provided by the system where GFI ReportCenter is installed GFI ReportCenter Introduction e 7 2 Installation 2 1 System requirements Install the GFI EndPointSecurity ReportPack on a computer that meets the following requirements Microsoft Windows 2000 SP4 Microsoft Windows XP Professional Microsoft Windows Vista Enterprise Business or Ultimate edition Microsoft Windows 7 Microsoft Windows 2003 Server Microsoft Small Business Server 2003 Microsoft Windows 2008 Server Standard or Enterprise Editions Microsoft Small Business Server 2008 Windows 2000 SP4 XP SP2 2003 operating system Internet Explorer 5 1 or higher NET Framework version 1 1 or higher NOTE Ihe GFI EndPointSecurity ReportPack only allows you to gener
15. in the GFI ReportCenter settings is not reachable The activity monitor records and enumerates the following information e Date The date and time when the scheduled report was executed e Product name The name of the GFI product to which the report belongs e Type The event classification error information or warning GFI ReportCenter e Description Information related to the state of a scheduled report that has been executed The format and contents of the activity description vary depending on the event type NOTE The description is often the most useful piece of information indicating what happened during the execution of a scheduled report or the significance of the event 5 6 Enable disable a scheduled report ocheduled reports can be enabled or disabled as required Use the Scheduled Reports navigation button to view the list of scheduled reports as well as to identify their current status The status of scheduled reports is shown through the icon included on the left hand side of each schedule Indicates that the scheduled report is disabled Indicates that the scheduled report is enabled or pending To enable or disable a scheduled report right click on the respective report and select Enable Disable accordingly 5 Editing a scheduled report To make changes to the configuration settings of a scheduled report 1 Click Scheduled Reports gt Scheduled Reports list navigation button 2 Right cl
16. product ReportPack 5 Product Selection drop down list 12 47 48 49 GFI ReportCenter Index e 63
17. report that you wish to add to favorites and select Add to Favorites List GFI ReportCenter Getting started Default reports e 27 5 Scheduling reports 5 1 Introduction GFI ReportCenter allows you to generate reports on a pre defined schedule as well as at specified intervals In this way you can automate the generation of reports which need to be created and delivered on a regular basis Further to this GFI ReportCenter can also be configured to automatically distribute scheduled reports via email For every scheduled report you can configure custom emailing parameters including the list of report recipients and the file format e g pdf in which the report will be attached to the email Use the report scheduling feature to automate your report generation requirements For example you can schedule lengthy reports after office working hours and automatically email them to the intended recipients In this way you maximize the availability of your system resources during working hours and avoid any possible disruptions to workflow Both default and custom reports can be scheduled for automatic generation 5 2 Scheduling a report To schedule a report 1 Click on the Default or Custom Reports option pane 2 Right click on the report to be scheduled and select New Scheduled report This will launch the Scheduled Report Wizard Click on Next to continue GFI ReportCenter Scheduling reports e 29 Schedule Report Wizard
18. storage options and specify the file format and destination folder where this report will be stored Settings Send by mail Click on the Settings Button to customize and configure the email settings which will be used for report distribution Settings Screenshot 22 Report Scheduling Wizard Advanced Settings dialog 5 To export the generated report to file select Export to file option To customize the report export configuration settings click on the Settings button underneath this option NOTE For information on how to configure export to file settings refer to Configuring report export to file options section in this chapter 6 To automatically distribute generated reports via email select the Send by mail option To customize the email settings used for report distribution click on the Settings button underneath this option NOTE For information on how to configure email settings refer to the Configuring report emailing options in this chapter 7 Specify a name and description for this scheduled report Click on Next to continue 8 Click on Finish to finalize your settings 5 3 Configuring advanced settings GFI EndPointSecurity ReportPack allows you to export scheduled reports to a specific file format as well as to automatically distribute these reports via email This is achieved using either a set of parameters e g recipient s email addresses which are specified on the fly during scheduled report conf
19. the following report ar Device usage an September 2009 This report shows the device connections made by user Bab Jones on computer Vires POT during September 2009 Tou will be asked ta select which security scan data source to use and which filters to apply to this new custom repart Click next to continue Screenshot 18 Custom Report Wizard Welcome dialog 2 Right click on the custom report that you wish to modify and select Edit This will launch the Custom Reports Wizard through which you can make the required changes NOTE For more information on how to configure the parameters of a custom report refer to the Creating a custom report section in this chapter 4 6 Deleting a custom report To delete a custom report 1 Click on the Custom Reports navigation button 2 Right click on the custom report that you wish to permanently remove from the list and select Delete 3 Click Yes to confirm 4 7 Adding custom reports to the list of favorite reports Custom Reports Generate report Edit Delete Add To Favorites List Screenshot 19 Favorite reports navigation button 26 e Getting started Default reports GFI ReportCenter You can group and access frequently used reports through the Favorite Reports navigation button To add a custom report to the list of favorite reports 1 Click on the Custom Reports navigation button to launch the list of available reports 2 Right click on the custom
20. 0 All rights reserved GFI Software Ltd Screenshot 38 Database source configuration settings Click Database Source to view in the right pane window the current database source settings 6 4 Configuring default scheduling settings To configure the default settings to be used by scheduled reports 1 Click on the Options navigation button GFI ReportCenter 3 6 Screenshot 39 Default Scheduling Options node 1 From the pull down menu click on the Tools Default Scheduling Options 2 Configure the required parameter as described in the Configuring Advanced Settings section of the Scheduling Reports chapter GFI ReportCenter Configuring default options e 45 7 General options 7 1 Entering your license key after installation If you have purchased GFI EndPointSecurity enter your License key using the Options gt Licensing node no re installation re configuration required NOTE Entering the License Key should not be confused with the process of registering your company details on our website This is important since it allows us to give you support and notify you of important product news You may register and obtain your GFI customer account from http www gfi com pages regfrm htm To input your GFI EndPointSecurity license key in the ReportPack Product Selection GFI EndPointS ecurity 4 2 AeportPack bul GFI EndPaintSecuritu 4 2 HeportPack ALL PRODUCTS Screenshot 40 Product Selection drop down l
21. 13 N 5x Tots 1155 100 0 File amp ystem MonFilesystem Screenshot 43 Samples showing extracts of device usage summary report A pie chart showing the percentage of allowed vs denied access requests A bar chart showing how requests were distributed between file system and non file system devices GFI ReportCenter Appendix GFI EndPointSecurity Default Reports e 51 e Allowed amp Denied access requests per device category B Allowed B Denied Devices Device Category Allowed Denied Total Count COS DD t 16 16 PDA Devices 4 o Top 20 users who were allowed to access devices User Name 2 Device Category WVoDasENTIMAdministrator PDA Devices O Top 20 users who were denied to access devices UserName Device Category Count WY OOSENT Administrator COSY OVD 16 WC2DDSENTIPRA amp dministratar FDA Devices z Screenshot 44 Sample showing extracts of device access summary report A bar chart showing how requests were distributed between different device categories o A list showing the top 10 users having the highest amount of allowed access to devices o A list showing the top 10 users having the highest amount of denied access to devices 8 1 2 Users making use of each device This executive style report shows e Alist of all controlled devices used across the network e The users that have made use of every controlled device e CD DVD Totalusers 5 WTESTMOB Adrministr
22. Center framework e GFI EndPointSecurity 4 2 default reports e Report scheduling service 4 e Introduction GFI ReportCenter GFI ReportCenter framework The GFI ReportCenter framework is the management console through which you can generate the specialized product reports which are shipped with a product ReportPack The GFI ReportCenter framework offers a common application interface through which you can navigate generate customize and schedule reports I GFI ReportCenter 3 6 iua ae ee A aT Product Selection Ir GF Enef contSecunty 4 2 Report ack Default Reports Dun wa laiHe tre amp GF EndPontSecunty 4 2 RepoctPack pires pe beers zi UU Execute repeats al All devices uted grouped by device a A devices uted grouped by user BI Deve socer trends EI Siahshe sl reports iy Top activ ubenvimeachmes sepes Techracal repo D Secunty report LET ETT Current Page No 1 Total Page Na Screenshot 1 The GFI ReportCenter management console The GFI ReportCenter management console is organized as follows Navigation Pane Use this pane to access the navigation buttons configuration options provided with GFI ReportCenter Product Selection drop down list Use this drop down list to select the GFI product for which to generate reports The Product Selection drop down list displays all the products for which you have installed
23. September 2009 Sun Mon Tue Wed Thu 1 2 3 7 8 8 10 13 14 BEN 1E 17 20 241 22 23 24 ef 280 29 3 Todav 39 15 2009 Screenshot 7 Configuring custom date time period 3 Select Day option and expand the provided drop down This will launch the date selection calendar 4 Navigate to the required month i e September and select the required day i e 15 5 Click Finish to generate the report Example 3 Generating a Device usage summary report based on data collected over a specific date time period This example demonstrates how to generate a Device usage summary report based on the data collected by GFI EndPointSecurity between August 18 2009 and September 1 2009 1 Click on the Default Reports navigation button to launch the list of available reports 2 Right click on Device usage summary and select Generate report gt For Custom Date GFI ReportCenter Getting started Default reports e 15 Specify custom date Date Time Select the date time periad on which to base the report Reports based on date and time will gather the events occured during the selected time period and will generate results based on information Found within this specified time interval C5 Relative Day C2 Month Date range From 8 18 2009 1200008M gt To 3 172009 1200 00 PM gt Screenshot 8 Configuring custom date time period 3 Select Date range option and specify the required paramete
24. Y 2003 ENTI Administrator Printers hp LaserJet 1320 series D D D Screenshot 48 Sample report showing device access statistics report 8 2 2 Device usage statistics per user This report shows e List of external devices connected by each user e Number of allowed and denied access requests by user for each particular device _ v2003ENTINAdministrator Connected Devices Computer Name Device Category Zoftimes conneded V2003ENTII Printers hp LaserJet 1320 series USB 2 V 2003ENTII PDA Devices HP USB Sync USB 8 V 2003ENTII Human Interface Devices USB Keyboard USB 8 Attempted Access on Devices so mw n i mw n ow 2 2 2 6 4 1 V2003ENTII CD DYD 0 V2003ENTII Human Interface Devices USB Keyboard V 2003ENTII Human Interface Devices USB Keyboard V 2003ENTII PDA Devices HP USB Sync V2003ENTII i HP USB Syne VY2003ENTII i hp LaserJet 1320 series 2003ENTII i hp LaserJet 1320 series 0 0 Screenshot 49 Sample report showing user based device access statistics o Username A list of devices and the number of times it was plugged in A list of device access statistics per each user for each device GFI ReportCenter Appendix GFI EndPointSecurity Default Reports e 55 8 3 Top active users machines reports 8 3 1 Top active users The Top 20 or Top 50 active users report shows e Alist of users who have the highest amount of device a
25. act our Technical Support team please have your Customer ID available Your Customer ID is the online account number that is assigned to you when you first register your license keys in our Customer Area at htip customers gfi com We will answer your query within 24 hours or less depending on your time zone GFI ReportCenter Troubleshooting e 61 9 5 Build notifications We strongly suggest that you subscribe to our build notifications list This way you will be immediately notified about new product builds To subscribe to our build notifications visit http www gfi com pages productmailing htm 62 Troubleshooting GFI ReportCenter Index C configuration settings 45 custom reports 5 7 19 26 29 D data filters 7 19 database source 43 45 default reports 5 13 14 17 distribution of reports 6 7 E email settings 11 executive reports 13 export reports 7 r favorite reports 5 17 26 filter conditions 20 framework 3 4 5 6 9 installation 7 9 11 43 47 L license 10 11 36 47 48 N R Report scheduling 4 6 S schedule activity monitor 36 scheduled reports 5 7 35 37 otatistical 54 Statistical reports 4 oystem requirements 9 T Technical 56 Technical reports 4 13 Top 20 reports 4 U user interface 5 16 35 36 43 W wizard 9 11 37 38 navigation button 5 13 14 15 17 19 23 25 26 27 32 34 35 36 37 38 40 41 48 45 47 48 49 P
26. ate reports for data contained in the SQL Server database backend of GFI EndPointSecurity 2 2 Installation procedure The GFI EndPointSecurity ReportPack includes an installation wizard which will assist you through the installation process During the installation process this wizard will Verify that you are running the latest version of the GFI ReportCenter framework if you are installing the framework for the first time or the currently installed framework version is outdated the installation wizard will automatically download the latest one for you Automatically install all the required components distributed including the GFI ReportCenter framework the GFI EndPointSecurity default reports and the Report Scheduling service To start the installation 1 Double click on EndPointSecurity4rp exe GFI ReportCenter Installation e 9 GFI EndPointSecurity 4 ReportPack Prerequisites check This machine is missing components required by GFI EndPointSecurity 4 ReportPack GFI EndPointSecurity 4 ReportPack setup wizard will now download and install the Following components GFI Report Center Framework Screenshot 2 GFI ReportCenter framework detection dialog 2 GFI EndPointSecurity detects and lists missing prerequisites if any Click Next to download and install the prerequisites 3 When all prerequisites are installed click Next in the welcome screen wizard 4 In the license dialog read the licensing ag
27. ator WY2003ENTII Administrator DTSecure Privacy Users 1 WY2003ENT IhAdministrator mTrust Drive Users 1 WY2003ENTI Administrator SuperMulti RW Users 1 WY20035ENTI Administrator Screenshot 45 Sample showing device usage grouped by device report 52 e Appendix GFI EndPointSecurity Default Reports GFI ReportCenter o Device name and the category to which it belongs List of users who have used that device 8 1 3 Devices used by each user This executive style report shows e A list of users that have made use of controlled devices e The devices that have been used across the network amp p TESTMOB Administrator Devices 3 e Device Device category 0 coo oWO FlashMedia 1 storage Devices PCI bus 7 device D function D Network Adapters Screenshot 46 Sample showing device usage grouped by user report Logged on user name and the computer on which the devices were connected List of devices that were connected and accessed by the user Device access trends This device usage trend report shows e The change in device access attempts over time e Allowed Denied access counts per day in graphs GFI ReportCenter Appendix GFI EndPointSecurity Default Reports e 53 1 Access Trends for Filesystem Devices Access Attempts B Allowed B Denied B Allowed EB Denied Timeline days Screenshot 47 Sample report showing device usage trends A line graph showing the trend of allowed and den
28. cheduled Reports List Scheduled Reports Activity Ye Favorite Reports Default Reports Custom Reports fy Options Scheduled reports activity list Date 3 9 16 2008 4 14 50 PM 1 9 16 2009 4 14 50 PM 3 9 16 2009 4 14 50 PM 1 8 16 2009 4 14 50 PM 1 9 16 2009 4 14 45 PM 3 9 16 2009 4 14 45 PM 1 9 16 2009 4 14 44 PM 1 9 16 2009 4 14 44 PM 3 9 16 2009 4 14 39 PM 1 9 16 2009 4 14 39 PM 3 9 16 2009 4 14 39 PM 1 9 16 2009 4 14 39 PM 3 9 16 2009 4 14 34 PM 1 9 16 2009 4 14 34 PM 1 9 16 2009 4 14 33 PM 1 9 16 2009 4 14 33 PM 1 9 16 2009 4 14 28 PM 1 9 16 2009 4 14 28 PM 1 9 16 2009 4 14 28 PM 1 9 16 2009 4 14 28 PM 3 9 16 2008 4 14 23 PM 29M 6 9NNG 41423 PM lt ProductName GFI EndPointSecurity 4 2 ReportPack GFI EndPointSecurity 4 2 ReportPack GFI EndPointSecurity 4 2 ReportPack GFI EndPointSecurity 4 2 ReportPack GFI EndPointSecurity 4 2 ReportPack GFI EndPointSecurity 4 2 ReportPack GFI EndPointSecurity 4 2 ReportPack GFI EndPointSecurity 4 2 ReportPack GFI EndPointSecurity 4 2 ReportPack GFI EndPointSecurity 4 2 ReportPack GFI EndPointSecurity 4 2 ReportPack GFI EndPointSecurity 4 2 ReportPack GFI EndPointSecurity 4 2 ReportPack GFI EndPointSecurity 4 2 ReportPack GFI EndPointSecurity 4 2 ReportPack GFI EndPointSecurity 4 2 ReportPack GFI EndPointSecurity 4 2 ReportPack GFI EndPointSecurity 4 2 ReportPack GFI EndPointSecurity 4 2 ReportPack GFI En
29. ctivity Top 20 Users having allowed access l User Name Allowed access Count WV 2003 ENTII Administrator ATESTMOB Administrator Top 20 users having denied access User Name Denied access count WY 2003 ENTII Administrator 228 88 3 WIESTMOB Administrator WNT AUTHORITY LOCAL SERVICE Screenshot 50 Sample report showing Top 20 active users report Top list of users having the highest count of allowed access to devices Top list of users having the highest count of denied access to devices 8 3 2 Top 20 active machines The Top 20 or Top 50 active machines report shows e A list of monitored machines with the highest amount of device activity V2UOSENTII fo TESTMOB 5 Top 20 Computers having denied access Computer name Denied access count VZDUD SENTII TESIMOB Screenshot 51 Sample report showing Top 20 active machines report Top list of machines having the highest count of allowed access to devices Top20 Computers having allowed access Computer name Allowed access count e Top list of machines having the highest count of denied access to devices 8 4 Technical Reports 8 4 4 Connected devices grouped by category The connected devices grouped by category report shows e List of external devices plugged in to machines monitored by GFI EndPointSecurity Agents e All devices are grouped under their category 56 e Appendix GFI EndPointSecurity Default Reports GFI ReportCen
30. dPointSecurity 4 2 ReportPack GFI EndPointSecurity 4 2 ReportPack RFI PrdPaintSeciirit d 2 RenartPack Type Information Information Information Information Information Information Information Information Information Information Information Information Information Information Information Information Information Information Information Information Information Inform atinn Screenshot 28 Schedule activity monitor 36 e Scheduling reports GFI ReportCenter also includes a schedule activity monitor through which you can view events related to all scheduled reports that have been executed To open the schedule activity monitor click on the Scheduled Reports navigation button and select the Scheduled Reports Activity node This will launch the activity information in the right pane of the GFI ReportCenter management console The activity monitor displays the following events 3 Information The scheduled report was successfully executed and sent by email and or saved to disk a Warning The scheduled report was not executed because product license is invalid or has expired Error The scheduled report was not executed due to a particular condition event Typical conditions include e Errors when attempting to save the generated report to a specific folder for example out of disk space e Errors when attempting to send the generated report via email for example the SMTP server configured
31. eate custom reports which are tailored to your reporting requirements This is achieved by building up custom data filters which will analyze the data source and filter out the information that matches the specified criteria 4 2 Creating a new custom report To create a custom report 1 Click on the Default Reports navigation button 2 Right click on the default report that will be used as a custom report template and select New gt Custom Report This will launch the Custom Report Wizard Click Next Custom Report Wizard Date Time Select the date time period on which to base the report Reports based on date and time will gather the events occured during the selected time period and will generate results based on information found within this specified time interval C5 Relative Day Month Date range From 8 18 2008 w 1200008M To d 172009 1200 00 Ph Screenshot 11 Selecting the data source to use 3 Select the data source that will be used to generate the custom report GFI ReportCenter Getting started Default reports e 19 Custom Report Wizard Data Filters Specify anv filters that should be applied on the report Add Filter Property Filters Specify the filter condition to apply to the report Filter condition of Computer Name Logical relation Equal to a Value Wins Pi i Cancel Screenshot 12 Specifying data filter conditions 4 Configure the data filter c
32. ect option Generate this report every and set the interval to 1 Day 6 Set the start date to 09 16 2009 and time to 12 00 00 AM Click Next to proceed to the next dialog GFI ReportCenter Scheduling reports e 39 Schedule Report Wizard Advanced Settings Customize report distribution and storage options ou can send the generated report by email to a target recipient list or save the generated report in a folder on your file system Click on the Settings button of the relevant section in the dialog to further configure repart sending saving options Export to file ge Click on the Settings button to customize the report storage options and specify the file format and destination folder where this report will be stored Settings Send by mail d Click on the Settings button to customize and configure the email settings which will be used for report distribution Settings Screenshot 32 Advanced Settings dialog 7 From the Advanced Settings dialog click Settings under Export to file option 40 e Scheduling reports GFI ReportCenter Report Storage Options r a Folder Options a You can overde the default folder options Far this scheduled report Override the default folder options For this report CAD ally Reports m Report Format Adobe Acrobat pdt hal Adobe Acrobat pdf Microsoft Excel xls Microsoft ward dac Rich Text Format rtf Screensho
33. ent txt 3 05 56PM Storage Devices CAVVINDOVYS system32WOTEPAD EXE F iNew Text Document txt 3 06 00PM Storage Devices CAWVINDOVYS Explorer EXE F iNew Text Document txt 3 06 05PM CD DVD CAVVINDOVYS Explorer EXE 3 06 11PM CD DvD CAWVINDOVYS Explorer EXE 3 06 58PM CD DvD C WYINDOVYS Explorer EXE 3 07 10PM CD DYD C WWVINDOWS Explorer EXE 3 15 49PM Storage Devices C WINDOWS Explorer EXE F iNew Text Document txt 3 15 50PM Storage Devices CAVVINDOWYS system32 NOTEPAD EXE F iNew Text Document txt 3 16 37PM Storage Devices CAWVINDOVYS Explorer EXE F iNew Text Document txt Event Type Read Only access denied Date Time Computer Name Device Category Application amp Path O O 3 05 19PM TESTMOB Storage Devices CAWVINDOVYS Explorer EXE F inQeuybx exe 3 05 21PM TESTMOB Storage Devices CAWVINDOVYS Explorer EXE F Yautorun int 3 05 45PM TESTMOB Storage Devices C WVINDOW S Explorer EXE F inQeuybx exe 3 05 46PM TESTMOB Storage Devices CAWVINDOVYS Explorer EXE F autorun int 3 05 46PM TESTMOB Storage Devices CAWVINDOVYS Explorer EXE FA 3 05 46PM TESTMOB Storage Devices C WVINDOW S Explorer EXE FMewv Microsoft Office PowerPoint Presentation pptx 3 05 55PM TESTMOB Storage Devices C WVINDOW S Explorer EXE A 3 05 56PM TESTMOB Storage Devices C WINDOWS system32WOTEPAD EXE 3 05 56PM TESTMOB Storage Devices C Program Files Microsoft OfficevOffice12YSro
34. evice USB Device USB Device GFI ReportCenter 9 Troubleshooting 9 1 Introduction The troubleshooting chapter explains how you should go about resolving any software issues that you might encounter The main sources of information available to users are e he manual most issues can be solved by reading this manual e GFI Knowledge Base articles e Web forum e Contacting GFI Technical Support 9 2 Knowledge Base GFI maintains a Knowledge Base which includes answers to the most common problems If you have a problem please consult the Knowledge Base first The Knowledge Base always has the most up to date listing of technical support questions and patches To access the Knowledge Base visit http kbase gfi com 9 3 Web Forum User to user technical support is available via the web forum The forum can be found at http forums gfi com 9 4 Request technical support If you have referred to this manual and our Knowledge Base articles and you still cannot solve issues with the software contact the GFI Technical Support team by filling in an online support request form or by phone e Online Fill out the support request form on http support gfi com supportrequestform asp Follow the instructions on this page closely to submit your support request e Phone To obtain the correct technical support phone number for your region please visit http www gfi com company contact htm NOTE Before you cont
35. ick on the scheduled report that you wish to re configure and select Properties This will launch the Scheduled Reports Wizard Schedule Report Wizard an Welcome to the EndPointSecurity L Schedule Report Wizard This wizard will help you schedule the following report rg Outside working hours This repart show the devices which were connected outside the working Hours Click nest to continue Screenshot 29 Scheduled Reports wizard GFI ReportCenter Scheduling reports e 37 3 Click on Next and perform the required changes For information on how to configure the parameters of a scheduled report refer to the Creating a scheduled report section in this chapter 5 8 Deleting a scheduled report To delete a scheduled report 1 Click on the Scheduled Reports navigation button 2 Right click on the scheduled report that you wish to permanently remove from the list and select Delete 5 9 Example Scheduling a report This example demonstrates how to schedule a device usage summary report called Daily Device Usage Report This schedule will be configured to e Generate the first report on 09 16 2009 at 12 00 e Continue generating the same report on daily basis e Export the generated report s to folder C Daily Reports in PDF format e Email the generated report using the following custom parameters o Send from email account administrator masterdomain com o Send to email account gfireportcenter omasterdomain
36. ied access attempts for file system devices e A line graph showing the trend of allowed and denied access attempts for non file system devices 8 2 Statistical Reports 8 2 1 Device access statistics This device access statistics report shows e Number of allowed denied access requests by each user for each particular device e Row entries distinguishing between read only and read write full access requests e Distinct file system and non file system devices 54 e Appendix GFI EndPointSecurity Default Reports GFI ReportCenter Q Non FileSystem Devices Device Category Device Description Allowed operations Denied operations Read WNT AUTHORITY 3LOCAL Printers hp LaserJet 1320 series D N A 2 WTESTMOB VAdministrator Network Adapters PCI bus 7 device 0 function O D 3 2 WV2003 ENTI Administrator Human Interface Devices USB Keyboard D 2 2 WY 2003 ENTI Administrator PDA Devices HP USB Sync D 5 4 WY 2003 ENTI XAdministrator Printers hp LaserJet 1320 series 1 N A Qr FileSystem Devices Ca CIS i Device Category Device Description WTESTMOB Administrator CD DVD 0 8 0 12 0 WTESTMOB Administrator Network Adapters PCI bus 7 device 0 function O D D WTESTMOB Administrator Storage Devices FlashMedia 1 9 34 37 37 W 2003 ENTI Administrator CD DVD 25 29 W 2003 ENTI Administrator Human Interface Devices USB Keyboard 0 0 0 WY 2003 ENTI Administrator PDA Devices HP USB Syne D 0 D W
37. iguration or using the default set of report export and distribution parameters configured during the ReportPack installation NOTE The Report Scheduling Wizard is by default configured to use the default set of report export and distribution parameters Report export formats Scheduled reports can be exported in a variety of formats Supported file formats include GFI ReportCenter Scheduling reports e 31 Format Description Use this format to allow distribution of a report on Adobe Acrobat PDF different systems such as Macintosh and Linux while preserving the layout Use this format if you want to further process the MS Excel XLS report and perform more advance calculations using another external program such as Microsoft Excel Use this format if you want to access this report Meera meat using Microsoft Word Use this format to save the report in a format that Rich text format is small in size and which allows accessibility RTF through different word processors in different operating systems Use this format to save the report in a platform independent format which can be viewed through HTML HTM a web browser For example you can include reports exported in html format directly on your website or intranet 5 3 1 Configuring report export to file options Export to file m Click on the Settings button to customize the report storage options and specify the file format and destinat
38. ion folder where this repart will be stored Settings Screenshot 23 Advanced Settings dialog Export to file settings button To configure the report Export to file settings of a scheduled report 1 From the Advanced Settings dialog click Settings button underneath the Export to file option 32 e Scheduling reports GFI ReportCenter GFI ReportCenter Report Storage Options Folder Q prion Tou can overde the default folder options Far this scheduled Vu report Override the default folder options For this report C Program FilessGFIEndPaintSecurty 4 ReportPack L Report format Adobe Acrobat pdt a Screenshot 24 Advanced Settings Export to file options 2 Select the Override the default folder options for this report 3 Specify the complete path where the exported report will be saved 4 Specify the file format in which the exported report will be saved 5 Click OK to finalize your configuration settings NOTE For information on how to configure the default export to file settings refer to the Configuring default scheduling options section in this manual 5 3 2 Configuring report emailing options To configure the report emailing options of a scheduled report do as follows Send by mail Click on the Settings Button to customize and configure the email settings which will be used for report distribution Settings Screenshot 25 Advanced Settings dialog Send by email settings button
39. ist 1 Select the respective product e g GFI EndPointSecurity 4 2 from the Product Selection drop down list 2 Click on the Options navigation button 3 Right click on the Licensing node and select Set Licensing This will launch the Licensing dialog GFI ReportCenter General options e 47 Licensing Licensing Current license key amp ReportPack GFI EndPointSecunty 4 2 ReportPack Licensing status Evaluation version Evaluation status 10 days evaluation 2 days passed License key Evaluation New license key Enter your new HepartPack license key Screenshot 41 Licensing dialog 4 Type the GFI EndPointSecurity license key in the space provided 5 Click on OK to finalize license key entry 7 2 Viewing product ReportPack s version details To view the version information of a currently installed product ReportPack 1 Select the product report from the Product Selection drop down list 2 Click on the Options navigation button 3 Click on the Version Information node The version details are displayed in the right pane of the GFI ReportCenter management console 7 3 Checking the web for newer builds Periodically GFI releases product and ReportPack updates which can be automatically downloaded from the GFI website To check if a newer built is available for download 48 e General options GFI ReportCenter Program Yersion Properties General E 1 l i Version
40. lect New gt Custom Report This will launch the Custom Reports Wizard 3 As soon as the welcome dialog is displayed click Next GFI ReportCenter Getting started Default reports e 23 Custom Report Wizard Date Time Select the date time pernod on which to base the report Reports based on date and time will gather the events occured during the selected time period and will generate results based on information Found within this specified time interval C5 Relative O Day Month 2 Date range Screenshot 16 Selecting the data source to use 4 Select Month option and specify the following parameters e Month September e Year 2009 5 Click on Next to proceed to the data filters dialog Custom Report Wizard D ata Filters Specify any filters that should be applied on the report Move Up Move Down Filters Computer Mame E qual ta Wire pl a2 and User Hame Equal to Bob Jones Add Filter Property Add Filter Property Specify the filter condition to apply to the report Specify the filter condition ta apply ta the report Filter candition Filter condition Hd Computer Mame User Mame Logical relation E qual to bal Value Wirespill Logical relation Equal ta w Value Bob Jones Filter property condition when added and v Screenshot 17 Filter conditions dialog s 24 e Getting s
41. n when added and and Screenshot 15 Using multiple filters 22 e Getting started Default reports GFI ReportCenter Parameters Filter Filter2 Filter condition Computer Name Logical relation Is equal to The data which will be included in this custom report will vary according to how these filters will be applied against your data This is defined through the Filter property condition drop down Filters applied Data output Filter 1 and Filter 2 The report will show e All the device usage activity made by users called JBjones on the computer called WinXPO1 Filter 1 Or Filter 2 The report will show e All the device usage activity made by users called Bjones no matter on which computer the connections were made AND e All device connections made to the computer called WinXpO1 no matter who the users are Example Creating a custom report based on data collected during a particular month This example demonstrates how to generate a device usage summary report called Device Usage on September 2009 This report will be based on the device usage activity e Collected from the computer called WinXp01 e Made by a particular user called Bob Jones e Recorded during the month of September 2009 To create this report 1 Click on the Default Reports navigation button 2 Right click on the report that you wish to customize and se
42. onditions that will be applied against the selected data source Click on Next to continue NOTE For more information on how to configure filter conditions refer to the section Configuring data filter conditions in this manual 5 Specify a name and description for the customized report Click on Next to continue 6 Click on Finish to finalize your configuration settings 4 3 Configuring data filter conditions Use data filter conditions to specify which device usage activity will be included in the report Only the device usage activity which matches the specified criteria will be processed and presented within the report 20 e Getting started Default reports GFI ReportCenter Custom Report Wizard Data Filters Specify any filters that should be applied an the report Filters Screenshot 13 Custom Report Wizard Filters dialog Click Add to launch the Edit filter properties dialog Configurable options in this dialog include e Filter condition This is the data source area on which the filter will focus for example select Computer Name to filter the device activity data that is related to a particular computer e Logical relation The condition comparison parameter e Value The string to which source data will be compared For example to generate a report which contains only information related to a workstation called WinXpO1 configure your filter parameters as shown below GFI Repo
43. oveMonitor exe 3 05 57PM TESTMOB Storage Devices CAVVINDOVYS system32WOTEPAD EXE F iNew Text Document txt 3 06 00PM TESTMOB Storage Devices C WINDOWS Explorer EXE pex 3 07 02PM TESTMOB Storage Devices C WYINDOVYS Explorer EXE a 3 14 41PM TESTMOB Storage Devices CAWVINDOVYS Explorer EXE Fa 3 15 27PM__ TESTMOB CD DvD C WYINDOVYS Explorer EXE E Screenshot 53 Sample report showing user based technical report o List of read only access allowed for user eo List of read only access denied for user 8 4 3 Machine based technical report The machine based technical report shows e A list of device access requests made from each machine e Activity grouped by machine name and event type e Application that attempted the access For file system devices the accessed path and filename GFI ReportCenter Appendix GFI EndPointSecurity Default Reports e 57 eb Computer Name TESTMOB O Event Type Agent started Date Time User Name Device Category Application B 14 2009 3 03 37PM e Event Type Device connected B 14 2009 3 05 01PM Unknown User Name ATES TMO B Administrator Device Category Storage Devices Application B 14 2009 3 06 59RM Oo Event Type Device disconnected B 14 2009 3 06 11PM B 14 2009 3 07 10 WTESTMO B Administrator User Name ATESTO B Administrator ATESTO B Administrator Storage Devices Device Category Storage Devices Application S
44. ovided to assist you in the configuration scheduling and customization of reports Report scheduling With GFI ReportCenter you can schedule reports to be generated on a pre defined schedule as well as at specified intervals For example you can schedule lengthy reports to be generated after office hours This allows you to maximize the availability of your system resources during working hours and avoid any possible disruptions to workflow 6 e Introduction GFI ReportCenter Distribution of reports via email GFI ReportCenter allows you to automatically distribute generated reports via email In scheduled reports this can be achieved automatically after the successful generation of a scheduled report Report export to various formats By default GFI ReportCenter allows you to export reports to various formats Supported formats include HTML PDF XLS DOC and RTF When scheduling reports you can optionally configure the preferred report output format Different scheduled reports can also be configured to output generated reports to different file formats Default reports The GFI EndPointSecurity ReportPack ships with a default set of graphical and tabular reports These reports can be generated without any further configuration effort immediately after the installation The default reports in this ReportPack are organized into four different report type categories Executive Statistical and Technical For a detailed description of
45. reement carefully Select I accept the Licensing agreement option and click Next to continue i amp GFI EndPointSecurity 4 2 ReportPack Setup License Key A Enter the following information to personalize your installation Please enter your name company and license key IF vou da not have a license key you can use GFI EndPaintS ecurity 4 2 HeportPack as an evaluation version For the first 10 days Full Mame Bab Jones Company ryCompany License Key Evaluation 000 Screenshot 8 Licensing details dialog 10 e Installation GFI ReportCenter 5 Specify the full user name the company name and the license key of GFI EndPointSecurity If you will be evaluating the product for 10 days leave the evaluation key as default i e Evaluation Click on Next to continue Tot d EndPointSecurity 4 ReportPack Setup ej Database selection Data source settings for GFI EndPoint amp ecurty 4 2 RepotPack Specify the database source that will be used by the GFI EndPointSecunty 4 2 HepartPack C3 Use sample database Use SOL Server database Server Wwingk 350 Database ESECD B Use Windows authentication Login using the following credentials SQL Account User Password Cc Jen Screenshot 4 SQL Server selection dialog 6 Specify the details of the SQL Server which is hosting your GFI EndPointSecurity database backend and the database name NOTE For evaluation purposes you can also use the tes
46. rs e From 08 18 2009 12 00 00 AM e To 09 01 2009 12 00 00 PM NOTE Date and time format are based on the regional settings configured on your computer 4 Click Finish to generate the report 3 3 Analyzing the generated report GFI ReportCenter 3 6 File Tools Help 4 gt Clm d i m 100 Haie aliaa dz dans Product Selection GFI EndPointSecurity 4 2 ReportPack GFiEndPointSecurity Default Reports on The cheb in his repori display percenimges of allowed versus denied access tr difiereni deu ces across all moni lored compulers on he ne work liadso lists Fe lop 10 users wh Allowed or Denied access GFI EndPointSecurity 4 2 ReportPack Executive reports 2 Device usage summary Q2 All devices used grouped by device 3 All devices used grouped by user 2 Device access trends 5 Statistical reports Top active users machines reports 16 Sep 2008 15 12 eximinis rater 18 Aug 2008 000 b Custom Reports m 1 Scheduled Reports i f Options 2 Help Current Page No 1 Total Page No 3 Zoom Factor Page width Screenshot 9 Generated reports are displayed in the right pane of the management console 16 e Getting started Default reports GFI ReportCenter Generated reports are shown in the right pane of the GFI ReportCenter Use the toolbar at the top of the report pane to access common report related functions Report browsing options Browse the genera
47. rt grouped by users accessing each device computers to which the devices were connected and the device class to which every connected device belongs e Security reports Use the reports in this category to generate a list of o Users that connected devices during weekends or outside working hours users that tried to access devices on multiple machines o machines used to access devices by multiple users GFI EndPointSecurity default reports are accessed by clicking on the Default Reports navigation button provided in the management console NOTE Click a report node to view a description and a sample output of what the selected report will contain Getting started Default reports e 13 3 2 Generating a default report To generate a default report 1 Click on the Default Reports navigation button to launch the list of default reports available Default Reports GFI EndPomtSecurity 4 AeportPack 2 Executive reports Eei F Generate report For Today E Add To Favorites List For Yesterday amp 3 All de For Last 7 Days 2 Devic Mew E H Statistical repars PA agea aa H H Tap active users machines reports For Custom Date H H Technical reports H Security reports Screenshot 6 Selecting the data set period 2 Right click on the report that you wish to generate select Generate report and specify which device activity data will be represented in the report NOTE Default reports can be based on the
48. rtCenter Getting started Default reports e 21 Add Filter Property Specify the filter condition to apply to the repart Filter condition P Computer M ame bal Logical relation Equal to hal Value Wwirtsp0 Cancel Screenshot 14 Filter conditions configuration dialog For more specific reports you can limit the range of information to be displayed by tightening your search criteria This is achieved by configuring and applying multiple data filters against the selected data source When more than one filter is used you will also have to specify how these filters will be logically linked This is achieved by selecting a logical grouping condition from Filter property condition drop down list provided at the bottom of the dialog e Select And to include ALL the scan data information that satisfies ALL of the conditions specified in the filters e Select Or to include ALL the scan data information that matches at least one of the specified filter conditions Example Using multiple filters Consider the situation where a custom report has 2 filters configured as follows Add Filter Property x Add Filter Property Specify the filter condition to apply to the report Specify the filter condition ta apply to the report Filter condition Filter conditions 4 Computer M ame w E Computer Hame Logical relation Logical relation Equal ta hal Equal ta kd Value Value Filter property conditio
49. s This option contains the default configuration settings used by the ReportPack when generating a new scheduled repart The settings include email options used ve Favorite Reports when sending scheduled reports by Email and folder options used when saving the generated scheduled reports w Default Reports e Custom Reports Licensing Used to specify the GFI EndPointSecurity ReportPack license key which is required for generating reports Scheduled Reports 2010 All rights reserved GFI Software Ltd Screenshot 36 Options navigation button Through the Options navigation button you can configure the following parameters e Database source Use this node to specify the database backend from where the ReportPack will extract the required reporting data e Default scheduling settings Use this node to configure the default export to file parameters and report emailing parameters of scheduled reports 6 2 Configuring database source To configure your database source 1 Click on the Options navigation button 2 Right click on Database Source node and select Set Database Source his will launch the database source configuration dialog GFI ReportCenter Configuring default options e 43 Database Source Database Source Database settings Please specify the name or IP of the machine containing the SOL Server MSDE database to use Server DE name Use SOL Server Authentication User z Pass
50. t 33 Advanced Settings Export to file options 8 Select Override the default folder options for this report 9 Specify the complete path where this report will be saved i e C Daily Reports 10 From the report format drop down select PDF and click OK Send by mail Click on the Settings button to customize and configure the email settings which will be used for report distribution Settings Screenshot 34 Advanced Settings dialog Send by email settings button 11 From Advanced Settings dialog click Settings button under Send by email option GFI ReportCenter Scheduling reports e 41 Email Alerts Options Email Uptions Tou can overde the default email options Far this scheduled report Override the default email options For this report To adrministraborte masterdamain cam LL From ghireparteenterteimasterdomain com Server winzk3serv SMTP Server requires login Report format Adobe Acrobat pdf a Screenshot 35 Report distribution options 12 Select Override the default email options for this report 13 Specify the following parameters e To administrator masterdomain com e From gfireportcenter masterdomain com e Server Win2k3serv 14 From the report format drop down select PDF and click OK to finalize your email settings 15 Click Next and specify the following parameters e Report Name Daily device usage report e Report Title Daily device usage report
51. t database that is distributed with this installation available only as a Beta version 7 Specify the product installation path or click Install to leave as default The installation will need approximately 100 MB of free disk space 8 The installation wizard is now ready to copy the required files and finalize the installation To proceed click Finish 2 3 Launching the GFI EndPointSecurity reports for GFI ReportCenter Following the installation launch the GFI EndPointSecurity Reports for GFI ReportCenter from Start gt Programs gt GFI ReportCenter gt EndPointSecurity 4 2 ReportPack 2 4 Selecting a product When more than one product ReportPack is installed use the Product Selection drop down list to select the GFI product ReportPack to be used GFI ReportCenter Installation e 11 Product Selection GF EndPaintS ecuritu 4 4 HepartPack bal GFI EndPaintSecuritu 4 2 HeportPack ALL PRODUCTS Screenshot 5 Product Selection drop down list For example to run the reports provided in the GFI EndPointSecurity ReportPack 1 Launch GFI ReportCenter from Start gt Program Files gt GFI ReportCenter 2 Select GFI EndPointSecurity 4 2 ReportPack from the Product Selection drop down list NOTE Select the ALL PRODUCTS option to display and navigate all the ReportPacks that are currently installed in GFI ReportCenter 12 e Installation GFI ReportCenter 3 Getting started Default reports 3 1 Introd
52. tSecurity ReportPack A ReportPack can be downloaded as an add on to the GFI product GFI ReportCenter Introduction e 3 GFI Product 2 ReportPack GFI Product 3 ReportPack GFI Product 1 ReportPack REPORT CENTER FRAMEWORK GFI Product X ReportPack Figure 2 Several ReportPacks plugged into the GFI ReportCenter framework A ReportPack plugs into the GFI ReportCenter framework allowing you to generate analyze export and print the information generated through these reports 1 2 About the GFI EndPointSecurity 4 0 ReportPack The GFI EndPointSecurity ReportPack is a full fledged reporting companion to GFl EndPointSecurity It allows you to generate graphical IT level technical and management reports based on the portable device usage events recorded by GFI EndPointSecurity From trend reports for management ROI to daily drill down reports for technical staff the GFI EndPointSecurity ReportPack provides you with the easy to view information required to fully understand the ever changing portable device activity on your corporate network The GFI EndPointSecurity ReportPack allows for the creation of various graphical and text based reports including Executive summaries Statistical reports Technical reports and Top reports 1 3 Components of the GFI EndPointSecurity 4 0 ReportPack When you install the GFI EndPointSecurity 4 0 ReportPack the following components are installed e GFI Report
53. tarted Default reports GFI ReportCenter 5 Click on the Add button and configure the parameters of filter 1 as follows Filter condition Computer Name Condition Equal to Value WinXp01 7 Click OK to finalize your filter configuration settings 8 Click again on the Add button and configure the parameters of filter 2 as follows e Filter condition User Name Condition Equal to Value Bob Jones e Filter Property condition and 9 Click OK to finalize your filter configuration settings 10 Click Next and specify the following parameters e Report Name Device usage on September 2009 e Report Title Device usage by Bob Jones on computer WinXp01 e Report Description This report shows the device connections made by user Bob Jones on computer WinXp01 during September 2009 11 Click Next to proceed to the final dialog 12 Click Finish to finalize your custom report configuration settings 4 4 Runacustom report To run a custom report 1 Click on the Custom Reports navigation button 2 Right click on the custom report that you wish to generate and select Generate 4 5 Editing a custom report To edit the configuration settings of a custom report 1 Click on the Custom Reports navigation button GFI ReportCenter Getting started Default reports e 25 Custom Report Wizard Welcome to the EndPointSecurity Custom Report Wizard This wizard will help generate a new customized report based on
54. ted report page by page Zoom in Zoom out Bh oearch the report for particular text or characters Go directly to a specific page Breakdown the report into a group tree e g by date time m Print report Report storage and distribution options Jw Export the generated report to a specific file format E Distribute the generated report via email NOTE For information on how to configure report storage and distribution options refer to the Configuring Advanced Settings section in this manual 3 4 Adding default reports to the list of favorite reports Default Reports GFI ReportCenter ji EndPontSecurity 4 2 HepartPack 2 Executive reports 2 Device usage summary ag All devices used grouped by device e Al devices used euis by user E H Statistical cT Generate reu Top active users machin Add To Favorites List E p Technical reports TM Heo Security reports Screenshot 10 Favorite Reports navigation button You can group and access frequently used reports through the Favorite Reports navigation button To add a default report to the list of favorite reports 1 Click on the Default Reports navigation button to launch the list of available reports 2 Right click on the default report that you wish to add to favorites and select Add to favorites list Getting started Default reports e 17 4 Custom reports 4 1 Introduction GFI ReportCenter allows you to cr
55. ter Device Category Human Interface Devices Computer Name Connectivity Port of times connected USB WV2003ENTII VAdministrator 2003ENTII rz ERN TT Keyboard ia SiS ab Device Category Network Adapters Computer Name Connectivity Port Foftimes connected WTESTMOB VAdministrator TESTMOB PCMCIA PCI bus 7 device O function 0 Device Category PDA Devices Computer Name Connectivity Port F of times conneded WY2003ENTI Wdministrator 2003ENTII USB HP USB Sync 8 WY2003ENTI Administrator 2003ENTII USB HP USB Sync 1 WY2003ENTIL Administrator Screenshot 52 Sample report showing connected devices grouped by category report o The category to which a device belongs A list of devices used with the number of times they were plugged in by each user 8 4 2 User based technical report The user based technical report shows e List of device access requests made by each user Activities grouped by username and event type e Application that attempted access e For file system devices the accessed path and filename Event Type Read Only access allowed 3 05 48PM Storage Devices CAVVINDOVYS Explorer EXE FiiNew Microsoft Office PowerPoint Presentation pptx 3 05 50PM Storage Devices CAWVINDOVYS Explorer EXE F iNew Text Document txt 3 05 53PM Storage Devices CAWVMINDOVYS Explorer EXE F iNew Microsoft Office PowerPoint Presentation pptx 3 05 55PM Storage Devices C WINDOWS Explorer EXE Few Text Docum
56. the devices 8 5 2 Machines which had more than one user accessing devices This report displays the machines which had more than one user accessing devices Appendix GFI EndPointSecurity Default Reports e 59 CH Users 2 WESECDONM CristiB WAT ALITHORITYXSYSTEM ESECDDONnA Full amp ccez B MAT ALUTHORITYTSSYSTEM J ESECDU MN NaAccez WESECDORAMF ul lA cos WESECDOMNoAcces WESECDONMMNC ristB WESECDOMMR e adOnhy WAT AUTHORIT SS TER WESECDO MNF ul LA cce WESECDONMMAC ristB WESECDOMNoAcces WAT AUTHORIT SS TER Screenshot 58 Sample report devices accessed by multiple users on a machine o Computer name where the activity was detected eo Users that accessed devices on a particular machine 8 5 3 Connected devices outside working hours This report shows devices connected outside normal working hours 1 9 2009 10 33 02AM 1 9 2009 10 33 02AM 1 9 2009 10 33 02AM 1 9 2009 10 33 02AM 1 9 2008 10 33 02AM 1 9 2009 10 33 02AM 1 9 2009 10 33 02AM 1 9 2009 10 33 02AM 1 9 2008 2 20 14PM 1 9 2009 2 20 14PM 1 9 2009 2 20 14PM 1 9 2009 2 20 14PM 1 9 2008 2 20 14PM 1 9 2008 2 20 14PM 1 9 2009 2 20 14PM 1 8 2008 2 20 14PM WESECDOM MF ullAccess WESECDOM F ullAccess WESECDOMM ullAccess WESECDOM MF ullAccess WESECDOM MF ullAccess WESECDOMM ullAcces WESECDONAF ullAccess WESECDOM F ullAccess WESECDOM MF ullAccess WESECDOM F ullAccess WESECDOM MF ullAccess WESECDOM F ullAccess WESECDOMMF ullAccess
57. torage Devices O Event Type Read Only access allowed B 14 2009 3 04 35PM B 14 2009 3 05 02PM B 14 2009 3 05 09Phw B 14 2008 3 05 44PM B 14 2009 3 05 49PM B 14 2009 3 05 50PM User Name ATES TMO B Administrator ATES TMO B Administrator ATES TMO B Administrator ATES TMO B Administrator ATES TMO B Administrator ATES TMO Bydministrator Device Category CD D vD CD D vD CD D vD CD D D Storage Devices Storage Devices Application CWINDCWUSExplorer EXE CAIN DOWNS Explorer EXE CAWWIN DOWNS Explorer EXE CAWWIN DOWNS Explorer EXE CAWWIN DOWNS Explorer EXE CAWWINDOWS Explorer EXE FiNew Microsoft Office PowerPoint Presentation pptx F New Text Docurrert tt Screenshot 54 Sample machine based technical report LI MN ga sein E a 8 4 4 Device based technical report The device based technical report shows e List of events originating from devices monitored by GFI EndPointSecurity e Events sorted in chronological order and grouped by device description Q Device Category CD DVD 1 ae A Date Time UserName Computer Name Application Path EventType _ 9 14 2009 3 04 35PM WTESTMOBAdministrator TESTMOB CAWINDOVYS Explorer EXE E ReadOnly access allowed ReadOnly access allowed Read Only access allowed 8 14 2009 3 05 02PM NTESTMOB Administrator TESTMOB CWINDOVYS Explorer EXE E 9 14 2009 3 05 09PM WTESTMOB Administrator TESTMOB CAWINDOVYS Explorer EXE
58. uction GFI ReportCenter After installing the GFI EndPointSecurity ReportPack a number of specialized pre configured reports can immediately be generated on the data stored in the database backend of GFI EndPointSecurity These default reports are organized into the following categories e Executive Reports Use the reports in this category to generate a high level activity summary of all devices being controlled across the network The information presented in these executive reports is mostly graphical and includes o The percentage amount of allowed versus denied device access requests o Device usage activity by user machine and device class Trend reports such as device access attempts per day o The top 10 device users who have been mostly allowed and denied access to controlled devices e Statistical Reports Use the reports in this category to generate a Statistical overview of the device usage activity on a user and or device basis e Top active users machines reports Use the reports in this category to pinpoint top authorized unauthorized device users as well as to enumerate the devices which were most frequently accessed across a network e Technical Reports Use the reports in this category to generate detailed technical information related to controlled devices This includes the number of times that each device was connected to computers protected by GFI EndPointSecurity Technical reports allow you to generate repo
59. word Screenshot 37 Database source configuration dialog 3 Select the database type e g MS SQL Server from the provided list of supported databases NOTE GFI EndPointSecurity database backend supports only MSDE MS SQL Server 4 Specify the name or IP address of your MSDE MS SQL Server database backend 5 To use the credentials of an SQL Server account select Use SQL Server authentication option and specify the user name and password in the provided fields NOTE By default the GFI EndPointSecurity ReportPack uses Windows logon credentials to authenticate to the SQL Server 6 Click on OK to finalize your configuration settings 44 e Configuring default options GFI ReportCenter 6 3 Viewing the current database source settings GFI ReportCenter 3 6 File Tools Help e xjg 7f E B GFi Product Selection SECURITY amp MESSAGING SOFTWARE Database Source Selection GFI EndPointSecurity 4 2 ReportPack v GFI EndPointSecurity 4 2 ReportPack Options E SUD i GFI EndPointSecurity 4 2 ReportPack Sle i ai T Database Type MS SQL Server A Import Export Configuration Database Path Win2k3SQL Version Information P Licensing NOTE To change the database backend between different database types right click on Database Source and select Set Database Source e Favorite Reports 4 Default Reports Custom Reports Scheduled Reports 2 Help 201

GFI ESECMCREN1000-2999-2Y network monitoring software

Contents

Download Pdf Manuals

Related Search

Related Contents