Compare Sophos UTM Reporting Options
There are a few options when it comes to reporting on Sophos UTM. So what makes Fastvue Sophos Reporter so special?
In short, the Sophos UTM on-box reports and Sophos iView are great for UTM administrators concerned about UTM and network performance. Fastvue Sophos Reporter on the other hand is for everyone else concerned about employee internet usage. (But it’s also useful for UTM administrators too!)
Advantages of Fastvue Sophos Reporter
|Feature||Sophos UTM On-Box Reports||Sophos iView||Fastvue Sophos Reporter|
|Department and Security Group Reports|
Generate reports for Departments or Security Groups as specified in Active Directory.
|Limited: Departments need to be locally defined on the Sophos UTM.|
|‘Sensible’ Web Reports (Fastvue Site Clean)|
Most web reports do not make sense, in that they are dominated by sites such as fbcdn.net, akamaihd.net, doubleclick.net and google-analytics.com. Fastvue Sophos Reporter resolves these into the site the user was actually browsing using it’s unique Site Clean technology.
|‘Readable’ Time-Based Activity Reports|
HR and Department Managers need detailed web activity reports with date/times and full URLs, but a log search provides too much useless information. Fastvue Sophos Reporter groups log records into sessions, removes junk, and visualises activity with intuitive Gantt charts.
|Only via Log Search||Presented as a Log Search|
|Report on Web Policies|
Fastvue Sophos Reporter lets you find the policy (Filter Action and Proxy Profile) responsible for blocking or allowing any traffic. Great for troubleshooting and refining policies.
|Report on Allowed Undesirable Sites/Apps|
Easily categorize and report on sites that are unproductive or unacceptable that have been allowed by Sophos UTM.
|Report on Blocked Acceptable Sites/Apps|
Easily categorize and report on sites that are acceptable or productive that are being blocked by Sophos UTM.
Report on subnets using CIDR notation such as Source IP ‘In Subnet’ 10.1.0.0/16
|Flexible Report Filtering|
Filter your reports by any value in the Sophos UTM Web Filter logs, and by AD groups or attributes. For example, report on activity where the Department is ‘Accounts’, AND the Productivity is Unproductive or Unacceptable, AND the Category is not equal to ‘Web Ads’.
|Limited: Limited subset of log fields available, and no AD integration||Limited: Limited subset of log fields available, and no AD integration. Can only drilldown into single items in existing reports.|
|Import Historical Logs|
Historical log files already created by Sophos UTM can be imported and reported on.
|Fill in Missed Syslog Messages|
If the reporting server is temporarily offline, Fastvue Sophos Reporter will fill in the missed syslog messages using archived logs from Sophos UTM. iView will have gaps in the data for missed syslog messages.
|Supports older UTMs|
Version of Sophos UTM required for the reporting application.
|N/A||9.206 and above||9.1 (and probably older)|
I could spend the entire weekend looking and analyzing it. Very, very cool!William Redig
Fastvue Site Clean Rocks! And I love your customer support!Andrew Reynolds, Network Administrator
Already found a bunch of stuff in need of trimming in the UTM’s configuration.William Redig
Site clean is possibly the most useful tool for web usage analysis and reporting since the Internet began! A true Eureka moment in web reporting.Nathaniel Gill, Falkland Island Government
I thought the UTM had good built-in reporting… and it does… but the way Fastvue Sophos Reporter clearly shows everything is amazing!William Redig
Free 30 day trial. No card. No obligation. Free support. Always.