Support Forum
The Forums are a place to find answers on a range of Fortinet products from peers and product experts.
Not applicable

Reports, Volume in Bytes, URLs, Domain names

How can I create a Report showing volume in bytes AND URLs/Domain names in reports? All Web Activity shows the IP address of the WebSites and it´s usefull. All Web Filter reports shows hits, clicks, but not volume in bytes. How can I generate a report showing, for example: microsoft.com - 15.0000 Bytes google.com - 10.0000 Bytes
9 REPLIES 9
rwpatterson
Valued Contributor III

How about this?

Bob - self proclaimed posting junkie!
See my Fortigate related scripts at: http://fortigate.camerabob.com

Bob - self proclaimed posting junkie!See my Fortigate related scripts at: http://fortigate.camerabob.com
Not applicable

In a pre-production environment, all Web Sites appears as IP. Even in your example, some Web Sites are shown with IP address wich is useless. Why the FAZ can´t use the URL/Domain typed in the Browser? Hotmail, for exanmple, uses several diff. IPs and none of the Hotmail entries appears with names, only with IPs and several Ips could be " agregated" in a single entry in the report, if using " hotmai.com" ou " live.com" insted IP address, masking the real accessed Web Site
rwpatterson
Valued Contributor III

You could enter them as aliases. Just because you type Hotmail in the browser, doesn' t mean Hotmail is the main domain domain name. Shoot a NSLOOKUP on those above IP addresses. They probably don' t resolve, which is why the FAZ doesn' t have names. Most web sites have servers which aren' t named that store images and other data. These will generate tons of hits with very little bandwidth.

Bob - self proclaimed posting junkie!
See my Fortigate related scripts at: http://fortigate.camerabob.com

Bob - self proclaimed posting junkie!See my Fortigate related scripts at: http://fortigate.camerabob.com

So there is no way to generate reports by names of Websites? :(
abelio

ORIGINAL: Zeeshan Ahmed So there is no way to generate reports by names of Websites? :(
Hi Zeeshan, if you read carefully what Bob posted above you cannot conclude that. FAZ use DNS to resolve host names, if host names doesn' t resolve reverse dns, you cannot obtain a report for those webserver by name; if you' re interested in show those by name in your reports, define an alias as a workaround. i.e.: look the Bob' s report above: ' 72.21.81.133' doesn' t resolve to any host name, its DNS entries are misconfigured.

regards




/ Abel

regards / Abel
rwpatterson
Valued Contributor III

ORIGINAL: Zeeshan Ahmed So there is no way to generate reports by names of Websites? :(
You cannot get a name for an IP that has no name...

Bob - self proclaimed posting junkie!
See my Fortigate related scripts at: http://fortigate.camerabob.com

Bob - self proclaimed posting junkie!See my Fortigate related scripts at: http://fortigate.camerabob.com

hmm.. thanks bob & Abel
Not applicable

I have the same problem in my reports, that i see the ip adresses of my destination. When i do a nslookup i can find sometimes the websites but in the report of the FA he don' t give the website.
rwpatterson
Valued Contributor III

What version FAZ firmware are you currently running?

Bob - self proclaimed posting junkie!
See my Fortigate related scripts at: http://fortigate.camerabob.com

Bob - self proclaimed posting junkie!See my Fortigate related scripts at: http://fortigate.camerabob.com
Labels
Top Kudoed Authors