Reporting: Users with top blocked request
I would like to run a report that will list all users by blocked request. This will allow administrators to see users who are attempting to bypass the filtering, and or have a compromised machine.
New custom report >> Available Reports: Users >> Today >> All Departments >> With the Action "Blocked" and then be able to sort by Requests.
Scott Glew commented
Fastvue is a company that specializes in web reporting and we've just launched a new product exclusively for Sophos UTM that meets your requirement.
Just head to Reports | Overview report and click the Filter button. Select Action equal to 'Block', select the date range you're interested it and hit Run Report.
The report will show you all the information you need such as Users, Sites, Source and Destination IPs, and even the Productivity estimates of the blocked sites. This will tell you if there are any sites being blocked that perhaps shouldn't be.
We'd really appreciate your thoughts on the beta: