About the FireCloud Usage Report

Applies To: FireCloud Internet Access

FireCloud is a beta product that is only available to participants in the WatchGuard FireCloud Beta program. To try FireCloud Internet Access, join the WatchGuard Beta test community.

The FireCloud Usage Report includes dashboards that show you detailed information about FireCloud traffic and user connections.

To monitor FireCloud usage:

  1. Log in to WatchGuard Cloud.
  2. Go to Monitor > FireCloud. If you have a Service Provider account, you must select an account from Account Manager. Service Providers cannot see FireCloud reports from the Overview page.
    The Usage Report page appears, with the Traffic tab selected.
  3. To select the report date range, click .
  4. To view data for a specific end-user, select a user account from the User drop-down list. By default, the report shows data for all users.
  5. To see report data, select a tab:
    • Security — Shows information about traffic blocked by FireCloud, as well as the top threats in each security area.
    • Traffic — Shows information about traffic allowed by FireCloud.
    • Users — Shows information about the users who connected to FireCloud and the devices they use.

Security

From the Security tab, you can see information about blocked traffic and the top threats in each security area. You can click a tile to open a page with more detailed information.

You can see data for allowed connections in the Traffic tab.

Blocked Attacks

Shows a line graph of blocked attacks.

Click this tile to open a page that includes a list of all attacks and the number of hits for each attack. You can then select an attack to see more information.

Blocked Malware

Shows a line graph of blocked malware.

Click this tile to open a page that includes a list of all malware attacks and the number of hits for each attack. Select an attack to see more information.

Zero-Day Malware (APT)

Shows a summary of the threats identified by APT Blocker as zero-day malware.

Blocked URL Categories

Shows a donut chart with a breakdown of hits for each URL category blocked by WebBlocker.

Top Blocked Applications

Shows a list of the applications that users tried to connect to that were blocked by Application Control.

Top Blocked Users

Shows a list of the users with the most blocked connections.

Blocked Destinations

Shows a list of the most frequently visited destinations that FireCloud blocked.

Blocked Protocols

Shows a list of the top blocked protocols.

Geolocation

Shows a map of the destination locations of connections to countries blocked by Geolocation. The country color indicates the number of connections:

  • Dark red — High
  • Light red — Medium
  • Grey — None

To open a page with additional details, such asthe number of hits for each country, click the tile. On the new page, you can also choose to display the map as a rotating globe.

Traffic

The Traffic tab shows information about allowed traffic through FireCloud. You can click any tile to go to a page with more information.

You can see security data for blocked connections in the Security tab.

Top Application Categories

Shows a donut chart with a breakdown of how many hits there are for each application category.

Top Applications

Shows a list of the top applications that users connect to and use.

Top URL Categories

Shows a donut chart with a breakdown of how many hits there are for each URL category.

Top Domains

Shows a list of the most frequently visited domains.

Users

Shows a list of the FireCloud users with the most traffic.

Top Destinations

Shows a list of the most frequently visited destinations.

Top Protocols

Shows a list of the most frequently used protocols.

Geolocation

Shows a map of the destination locations of connections allowed by Geolocation. The country color indicates the number of connections:

  • Dark blue — High
  • Light blue — Medium
  • Grey — None

Users

The Users tab shows you information about the users who connect to FireCloud and the devices they use.

From the usage report, you can see this information:

User

Identifies the user who is authenticated to FireCloud.

Device

Shows all devices that the user connected to FireCloud from.

User Group

The groups that the user belongs to.

Policy

Shows all FireCloud rules that apply to this user, based on their user group.

Client Version

Shows the client connection manager version that runs on each device that the user connected to FireCloud from.

Operating System

Shows the operating system that runs on each device that the user connected to FireCloud from.

You can apply filters to the list of users so that it is easier to find specific users. You might do this if you want to see only users who have not connected to FireCloud recently or that have a specific version of the client installed.

To apply filters to the Users list:

  1. Click Filter Icon.
    The Filter window opens.
  2. Select the filters you want to apply. You can select multiple filters.
  3. Click Apply Filters.

Each filter that you apply is shown at the top of the users list. To remove a filter, click the Remove Icon next to the filter name.

Related Topics

See and Manage Licensed FireCloud Users