Secure Access Help Center

Top Categories Report

The Top Categories report is a list of the top security and content categories by DNS and firewall requests for your organization over the selected period.

👍

Packages and Feature Availability

Not all features described here are available to all Secure Access packages. For more information, see Determine Your Current Package. If you encounter a feature described here that you do not have access to, contact your sales representative for more information.

Table of Contents

Prerequisites

  • A minimum user role of Read-only. For more information, see Manage Accounts.

View the Top Categories Report

  1. Navigate to Monitor > Reports > Top Categories.

Report Fields

  • Category—The threat or content category item. Clicking a category name redirects you to the Category Details section.
  • Type—The type of category: security, content, or application.
  • Traffic—The total bandwidth of proxy requests uploaded and downloaded for this category.
  • Activity—The number of requests for the category for the selected period. Clicking the number of requests reveals more information:
  • the total requests for the selected period
  • which of the requests were blocked and which were allowed
  • the most active identities (the identities that have requested the category the most)
  1. Choose a time frame within which to view the result. You can view the report for the last 24 hours, the previous day (yesterday), last week, the last 30 days, or a custom range within the last 30 days.
125
  1. Filter the top categories by category type.
    You can view Security categories, Content categories, or both. By default, All is selected, so that both security and content categories are shown.
231
  1. Filter top categories by traffic type.
    You can filter by DNS, Web, or both (All).
241
  1. Filter top categories by response type.
    You can view categories from requests that were Allowed, Blocked, or both. By default, neither is selected, so all responses are shown.
231
  1. Filter requests that were warned or accessed after a warn.

  1. Choose identity types to filter results and click Apply.
    By default, no identity types are selected, so all identity types are shown.
215

You also have the option to search by identity if you know the identity name.

329
  1. Choose how to sort the top category results.

Sort by Traffic

  • DNS Requests—Show DNS requests first.
  • Web Requests—Show Web requests first.
  • Web Traffic—Show Web traffic first.
282

Ascending or Descending Order

  • Descending—Show the results in descending order. By default, descending is selected.
  • Ascending—Show the results in ascending order.
289

Once you have chosen all filters and sorting options, the report will reflect the appropriate results.

Top Categories Quick View

The quick view for Top Categories displays the most active identities and their respective requests for each individual category.

  1. Choose a time frame within which to view the quick view details.
    You can see details for the last 24 hours, the previous calendar day (yesterday), the last 7 days, the last 30 days, or a custom range within the last 30 days.

  1. Click the number of requests (DNS or Web) in the Activity column of the category you wish to examine.
    A modal appears with a graph displaying the total requests of that traffic type over the selected time period and the total number of allowed requests. The most active identities with requests in this category are also displayed.
846
  1. Optionally, click Full Details to open the Category Details for this category.

View Category in Other Reports

Viewing the category in other reports provides you with insights into how your organization accesses a destination category and what activities are involved. In the Top Categories report, each category can be explored further by accessing the View Menu. Clicking this menu (the "...") reveals three options:

Destination Details < Top Categories Report > Cloud Malware Report

Updated 14 days ago