It would be sweet if the SG would do a cleanup/purge of old data beyond reporting time.
Path: "logging & reporting --> reporting settings --> settings"

This is especially handy with the smaller devices with excessive logs and will prevent us from doing a REBUILD DB, with the loss of whole database.

(Example of reallife situation in CaseID [#8254771] )

277/5000
The Search Log Files feature (Action, Time, URL, User) is very useful when using report format, but we were not able to download it.

It would be very interesting to be able to download these searches, just as we can do in Logging & Reporting> Web Protection

Send the top user report via email when the interface utilization speed crosses the set threshold value

It would great when we could create a report of rules, a report of (unused, is an other question here) definitions and a report of interfaces in a readable format whice can add in a network description.

generating reports depending on the mac address

and monitoring the activity also depending on mac address

We would like to offload the dhcp function from cyberoam to a different dhcp server on our network. However we have a lot of static mac address -- ip address pairs already configured on cyberoam. It would be good to have a function that allows us to export either the list of dhcp address leases or the list of static mac address - ip mappings.

Please add Interface wise Bandwidth usage in log-viewer, It will help us to find realtime bandwidth usage by specific source & destination with port.

This feature request is related to community forum postings and service request 8034172.

Please provide a reporting AND monitoring option for XG* appliances to track the amount of internet up time. The report may be tied to a single port, such as port2/WAN or other ports that are user-specified.

At present, I have no practical way to actively monitor and report how long my ADSL connection remains up. I have historically been experiencing frequent and recurring disconnects and REALLY want to be able to report when I experience disconnects, so I can bring this information to my ISP.

Have the ability to generate reports on device connections on different published SSIDs, much like in the real-time wireless protection overview but on the duration (day / month / year) in a format of this style: date, connection time, connection time, device name / ip / mac, SSID, AP.

Similar to the previous one (https://ideas.sophos.com/forums/17359-sg-utm/suggestions/183852-reporting-traffic-monitor-weekly-monthly)

Peaks/period would be great to identify how the company is utilising its network. Currently the chart only shows the daily/weekly average, that does not reflect on the peaks.

I believe there could be an option if the report should show the average OR the max network traffic on the charts.

Thank you in advance

When you click on the Web Protection section, it brings you to Web Protection Statistics - Today. If you click the arrow in the top right of any of the panes, it brings you to the Bandwidth Usage tab of Logging & Reporting -> Network Usage, but it does not set the top left drop down to the any report. We still have to click into that dropdown and select the appropriate report. I raised a support ticket about this on OS 9.510-5 and I was told this was how it is supposed to function and to make a request.

Iview 2 supports only radius chap authentication. We like to use RSA secure-id because we are using this also with our Sophos UTM 9.4x appliances.

I would like to see time based (not by dates alone but by time - like 7:00pm to 7:00am) web usage reporting sorted by nodes, network or firewall rules.

I'd like to see this as a drill down of the web usage activity reports.

Dear Team,

I have a customer here requesting for a customize bandwidth usage on a per hour basis in which he can view top users based on the specific time provided

Monthly Graphical Reports
-please make the reports and logging dates customized
-enable export to PDF / XML

Customer wants reporting based on specific times during the day

Sandstorm reporting and logs should be available under the "Logging/Reporting" section of the UTM.

As of right now The only information that is able to be viewed is Username and IP Address. Can there be more details added such as computer name, OS, and remote IP address?

In Iview software we are not able to see the reports with date & time, for those who are accessing our internal server from external network.

I have a customer that is based in the Channel islands and if traffic needs to leave the EU they need to know exactly where this goes. However currently Sandstorm samples are load balanced across all Sandstorm datacentres. The customer would like logging added to the logs/reports that shows which Datacentre their samples were sent to.