Query and export of reports for the USG6000 series

19

Traffic reports display traffic trends and top rankings in various dimensions. You can effectively learn the traffic status of the current network based on traffic reports and therefore formulate the corresponding traffic measurement measures.

Context
When you view traffic reports on the firewall, the log system analyzes and summarizes the traffic log data stored in the local hard disks to form traffic reports.
Note:
When a large number of logs are generated, hard disks are recommended to prevent old logs from being overwritten by new logs.

Procedure
1. Choose Monitor > Report > Traffic Report.
2. Select a report type.
For the USG6000, select one from the following: source address, destination address, application, application category, application subcategory, user, source region, destination region, virtual system, address type, or traffic policy.
For the USG9500, select application, application category, or application subcategory.
3. Select the report time range from the time range check box or the user-defined time range.
4. Click Search to display traffic trend and traffic rankings in different dimensions.
Place the cursor at a change point on a traffic trend curve to display the time and traffic volume at this point.
Note:
Unidentified user and application information is not counted into traffic statistics.
5. (Optional) Click Export Report to export traffic reports in CSV format to the management PC.

Other related questions:
Query of the traffic report for the USG6000 series
For the USG6000 series, you can view details about the traffic report on the web UI as well as the traffic trend and rankings in different dimensions. 1. Choose Monitor > Report > Traffic Report. 2. Select one from the following: source address, destination address, application, application category, application subcategory, user, source zone, destination zone, or virtual system. 3. Select the report time range from the time range check box or the user-defined time range. 4. Click Search to display traffic trend and traffic rankings in different dimensions. Place the cursor at a change point on a traffic trend curve to display the time and traffic volume at this point. For details, see the USG6000 series product documentation.

Difference in log and report data queried in the same time range on the USG6000 series
As the firewall supports multiple types of reports, it takes some time for the system to aggregate log data into a report. This may result in a little consistency between log and report data, which is acceptable.

Exporting profiles from the USG6000
You can back up configuration on the USG6000 as follows: 1. Web UI: The current configuration can be backed up to the terminal. The profiles are in .zip or .cfg format and do not support Chinese characters. a. Choose System > Profile Management. b. Click Export to export the current configuration. c. Click Save and select a path to save the profile. 2. CLI The device serves as the FTP server: You can configure the backup on the device instead of using independent software. Note: When uploading files from the configuration terminal to the device, files with the same names are directly overwritten. If original files need to be reserved, rename the files before file transfer. a. Enable the FTP function and configure the FTP user name, password, and FTP path. system-view, [sysname] ftp server enable Info:Start FTP server [sysname] aaa [sysname-aaa] manager-user ftpuser [sysname-aaa-manager-user-ftpuser] password Enter Password: Confirm Password: [sysname-aaa-manager-user-ftpuser] service-type ftp [sysname-aaa-manager-user-ftpuser] level 3 [sysname-aaa-manager-user-ftpuser] ftp-directory hda1:/ Note: A password must contain any three of upper-case letters, lower-case letters, digits, and characters. For local users who use FTP, run the ftp-directory command to configure the FTP path to save received files. b. Log in to the device using the FTP command and run the get command to download files to the PC or run the put command to upload files to the device. On the PC with the Windows system, choose Start > Run, enter cmd, and click OK. C:\Documents and Settings\Administrator> ftp 192.168.0.1 User (192.168.0.1:(none)): ftpuser Password: 230 User logged in. ftp> get vrpcfg.cfg ftp> lcd Local directory now C:\Documents and Settings\Administrator. ftp> Note: Administrator is the login name of the OS and varies with user configuration. Run the lcd command to view the path that saves the backup profile. Commands used on the FTP client vary with OSs. For details, see the relevant OS documents.

Function of the traffic report for the USG6000 series
The function of the traffic report for the USG6000 series is as follows: Traffic reports display traffic trends and top rankings in various dimensions. You can effectively learn the traffic status of the current network based on traffic reports and therefore formulate the corresponding traffic measurement measures.

Query of operation logs on the USG6000 series
By checking operation logs, you can view records for operations such as login, logout, and device configuration, learn the device management history, and improve device security. Context Only the USG6000 supports operation logs, and such logs can be displayed only when a hard disk is installed. Note: For the USG6650/6660/6670/6680, the operation log page is displayed no matter whether hard disks are installed. The firewall is deployed between the Internet and the network to be protected. When the IP address or login mode is configured for an administrator to log in to the firewall or the administrator performs any operation after login, operation logs are generated. Procedure 1. Choose Monitor > Log > Operation Log to view operation logs. 2. Choose Customize and select/deselect conditions for threat log display. 3. (Optional) Click Export to export operation logs in CSV format to the management PC.

If you have more questions, you can seek help from following ways:
To iKnow To Live Chat
Scroll to top