Compare Sophos UTM Reporting Options

There are a few options when it comes to reporting on Sophos UTM. So what makes Fastvue Sophos Reporter so special?

In short, the Sophos UTM on-box reports and Sophos iView are great for UTM administrators concerned about UTM and network performance. Fastvue Sophos Reporter on the other hand is for everyone else concerned about employee internet usage. (But it’s also useful for UTM administrators too!)

On-box Reports

  • Designed for the UTM Administrator
  • Reports on UTM and network performance
  • Basic information about web usage (top users, domains and categories)

iView Appliance

  • Designed for the UTM Administrator
  • Reports on UTM and network performance
  • Basic information about web usage (top users, domains and categories)
  • Collates data from multiple UTMs
  • Provides easy access to the log records that built each report

Fastvue Sophos Reporter

  • Designed for everyone else concerned about employee internet usage
  • Also useful for UTM Administrators
  • Goes beyond simple log aggregation to provide sensible and useful information around web usage, productivity and the UTM’s policies
  • Collates data from multiple UTMs
  • Provides useful activity reports as opposed to cluttered log searches to view full forensic details.

Advantages of Fastvue Sophos Reporter

Feature Sophos UTM On-Box Reports Sophos iView Fastvue Sophos Reporter
Department and Security Group Reports
Generate reports for Departments or Security Groups as specified in Active Directory.
Limited: Departments need to be locally defined on the Sophos UTM.
‘Sensible’ Web Reports (Fastvue Site Clean)
Most web reports do not make sense, in that they are dominated by sites such as fbcdn.net, akamaihd.net, doubleclick.net and google-analytics.com. Fastvue Sophos Reporter resolves these into the site the user was actually browsing using it’s unique Site Clean technology.
‘Readable’ Time-Based Activity Reports
HR and Department Managers need detailed web activity reports with date/times and full URLs, but a log search provides too much useless information. Fastvue Sophos Reporter groups log records into sessions, removes junk, and visualises activity with intuitive Gantt charts.
Only via Log Search Presented as a Log Search
Report on Web Policies
Fastvue Sophos Reporter lets you find the policy (Filter Action and Proxy Profile) responsible for blocking or allowing any traffic. Great for troubleshooting and refining policies.
Report on Allowed Undesirable Sites/Apps
Easily categorize and report on sites that are unproductive or unacceptable that have been allowed by Sophos UTM.
Report on Blocked Acceptable Sites/Apps
Easily categorize and report on sites that are acceptable or productive that are being blocked by Sophos UTM.
Subnet Reports
Report on subnets using CIDR notation such as Source IP ‘In Subnet’ 10.1.0.0/16
Flexible Report Filtering
Filter your reports by any value in the Sophos UTM Web Filter logs, and by AD groups or attributes. For example, report on activity where the Department is ‘Accounts’, AND the Productivity is Unproductive or Unacceptable, AND the Category is not equal to ‘Web Ads’.
Limited: Limited subset of log fields available, and no AD integration Limited: Limited subset of log fields available, and no AD integration. Can only drilldown into single items in existing reports.
Import Historical Logs
Historical log files already created by Sophos UTM can be imported and reported on.
N/A
Fill in Missed Syslog Messages
If the reporting server is temporarily offline, Fastvue Sophos Reporter will fill in the missed syslog messages using archived logs from Sophos UTM. iView will have gaps in the data for missed syslog messages.
N/A
Supports older UTMs
Version of Sophos UTM required for the reporting application.
N/A 9.206 and above 9.1 (and probably older)

 

I could spend the entire weekend looking and analyzing it. Very, very cool!
William Redig
Fastvue Site Clean Rocks! And I love your customer support!
Andrew Reynolds, Network Administrator
Already found a bunch of stuff in need of trimming in the UTM’s configuration.
William Redig
Site clean is possibly the most useful tool for web usage analysis and reporting since the Internet began! A true Eureka moment in web reporting.
I thought the UTM had good built-in reporting… and it does… but the way Fastvue Sophos Reporter clearly shows everything is amazing!
William Redig

Free 30 day trial. No card. No obligation. Free support. Always.