Schedule Compliance Reports

Applies To: ThreatSync+ NDR

We strongly recommend that you enable ThreatSync+ NDR for network traffic monitoring. ThreatSync+ NDR provides the network data required by these reports. For more information on ThreatSync+ NDR, go to About ThreatSync+ NDR.

WatchGuard Compliance Reporting provides additional reports for cybersecurity regulations and standards, as well as the ability to generate custom reports for specific defense goals. For information on the reports available with Compliance Reporting, go to About WatchGuard Compliance Reporting.

Before you can schedule a compliance report, you must enable the objectives and network defense controls for each report on the Configure > ThreatSync+ NDR > Compliance page. You can enable and disable specific controls depending on your business needs. For more information, go to Manage Network Defense Goals.

Each scheduled report can contain multiple reports. WatchGuard Cloud sends scheduled reports as a zipped folder email attachment that contains individual .PDF reports to recipients you specify. Recently generated reports are also available for download in WatchGuard Cloud.

Manage Scheduled Reports

To view and manage scheduled reports:

  1. Log in to WatchGuard Cloud.
  2. Select Administration > Scheduled Reports.
    The list of scheduled reports opens.

Screenshot of the Scheduled Reports list in WatchGuard Cloud

From the Scheduled Reports page, you can add, edit, or delete scheduled reports. You can also download recently generated reports.

Add a Scheduled Compliance Report

You can schedule reports to run daily, weekly, monthly, or immediately.

To add a scheduled Compliance report:

  1. Click Add Scheduled Report.
    The Create Schedule wizard opens with the Report Description step selected.

Screen shot of Report Description page in WatchGuard Cloud

  1. In the Schedule Name text box, type a name for the report.
  2. In the Description text box, type a description for the report.
  3. In the Product or Application section, select ThreatSync+ NDR.
  4. Click Next.
    The Add Reports page opens.

Screen shot of Add Reports page in WatchGuard Cloud

  1. In the Reports section, select the check box for each report to include in your scheduled report. To include all available reports, select the check box next to Defense Goal Reports.
  1. Click Next.
    The Schedule Report step opens.

Screenshot of the Schedule Report page, Step 3, in the Add a Scheduled Report Wizard

  1. From the Frequency drop-down list, select one of these options to specify how often to run the report:
    • Daily — Runs daily and contains data for the previous day for 00:00 until 23:59 (UTC).
    • Weekly — Runs weekly and contains data for Sunday 00:00 to Saturday 23:59 (UTC).
    • Monthly — Runs monthly and contains data for the first day of the month 00:00 to the last day of the month 23:59 (UTC).
    • Run Now — Generates the report for the date range you specify.
  2. For a Weekly report, specify the day of the week to run the report.
  3. For a Monthly report, specify the day of the month to run the report.
  4. To select the time the report starts to run, in the Start Time text box, click Screenshot of the clock icon.
    Or, in the Start Time text box, type the hour and minute of the day to start the report, in 24-hour format HH:MM.
  5. Click Next.
    The Add Recipients step opens.

Screenshot of the Add Recipients page, Step 4, in the Add a Scheduled Report Wizard

  1. In the Report Recipients text box, type the email address for each report recipient. To separate multiple addresses, use a space, comma, or semicolon. Press Enter to add the specified addresses to the recipient list.
    Reports must be smaller than 10 MB to be emailed.
  2. To add yourself as a recipient, click Add me as a recipient.
    The email address associated with your WatchGuard Cloud account shows in the list.
  3. Click Next.
    The Finish page opens, with a summary of the scheduled report settings.
  4. Click Save Report.
    The report is added to the list of scheduled reports.

Edit or Delete a Scheduled Report

You can edit and delete scheduled reports.

To edit a scheduled report:

  1. In the list of scheduled reports, click the report name.
    A summary of the report settings opens.

Screenshot of the scheduled report Description page that lists all report settings

  1. To edit the report description, click Edit Description.
  2. To edit the reports to run:
    1. Click Edit Reports.
    2. Select the check box for each report to include.
  3. To edit the report schedule:
    1. Click Edit Schedule.
    2. From the Frequency drop-down list, select Monthly, Weekly, or Daily.
    3. Specify the day and time to start the report.
  4. To save your changes, click Update.

To delete a scheduled report:

  1. Next to the name of the report you want to delete, click .
  2. Select Delete.
  3. In the Remove Scheduled Report dialog box, click Remove.
    The report is removed.

Download a Generated Scheduled Report File

When a scheduled report runs, WatchGuard Cloud sends the generated reports as a zipped .PDF email attachment to the report recipients. WatchGuard Cloud also stores all scheduled report files for a limited time, based on the report frequency:

  • Monthly reports are stored for three months.
  • Weekly reports are stored for three weeks.
  • Daily reports are stored for three days.
  • Run Now reports are stored for seven days.

If a scheduled report file is larger than 10 MB, the notification email does not include an attached report file. Instead, the report notification email instructs the recipient to log in to WatchGuard Cloud to download the scheduled report for the account.

To download a scheduled report file:

  1. Log in to WatchGuard Cloud.
  2. Select Administration > Scheduled Reports.
    The list of scheduled reports opens.
  3. In the scheduled reports list, click the report name.
    The report settings and report history show.
  4. Scroll down to the History section.

Screen shot of the History for a scheduled report

  1. To download a report file, click PDF report icon or Zip report icon.

    If you do not see the report, it might still be processing. The time required to process and generate the report depends on the types of selected reports, and position of the request in the processing queue.

For each report, the History shows the date the report was run, the completion status, an expiration date, and the report file size. When the report file expires, WatchGuard deletes the file.

Related Topics

About WatchGuard Compliance Reporting

Ransomware Prevention Defense Goal Report

Schedule ThreatSync+ NDR Reports

Manage Network Defense Goals