In this article
The DNSFilter dashboard Reporting page offers different types of reports to help visualize and evaluate DNS traffic. This data can help determine the need for new security measures or changes to current Filtering Policies.
MSP reporting displays global data from all organizations in the tenant, displaying the top active organizations based on the total number of requests. Standard reporting displays data for the organization in the DNSFilter account.
Across Reporting tabs, data can be filtered by date range and other report-specific drill-downs such as Allowed, Blocked, Organization, Users, or Roaming Clients. Available data filtering options are located across the top of each Reporting tab or display section.
This video was produced in 2022. The look and feel of our app has changed, but the function of the tool remains the same.
Insights
Insights is a snapshot of network data that also provides the ability to drill into the DNS Query Log’s raw data.
From Insights, view All threats by domain to see how many threat requests have been made on the tenant, who made them, and how to minimize them through policy adjustments.
MSPs can see high-level activity for all client Organizations, or drill down to a specific Organization’s activity through the Find Organization search bar. After selecting a single Organization, MSPs can review the data at a more granular level.
Note: Data within the last 10 days displays in 15-minute rollup buckets in local time. Data beyond 10 days is grouped by day and displayed in UTC, which may result in a gap or shift in data depending on the local time zone. Use Custom to select a specific date range.
AppAware
AppAware reporting shows requests associated with applications categorized within AppAware.
From AppAware reporting, see a detailed view of application requests and filter by different attributes to see indicators such as top applications based on request or total number of requests per application.
Adjust AppAware policies directly from the Application log by selecting Take Policy Actions next to the application.
Scheduled Reports
Account owners and admins can email report summaries to users at scheduled intervals: weekly, bi-weekly, or monthly.
Scheduled reports create an automated feedback channel, helping users stay up to date on DNS activities on their network and gain visibility into how DNSFilter protects them from threats and unwanted content.
Note: MSPs set Scheduled Reports from the MSP dashboard. The feature does not populate in organization views.
Data Explorer
Data Explorer displays all data associated with the account in customizable formats.
Export data as a PDF or CSV file, or share a link to the report with other authorized users in the organization.
Total Requests
Total Requests is the total volume of query traffic in a given time period. It is useful for seeing how traffic fluctuates by day of the week.
Queries Per Second
Queries Per Second is the volume of traffic in a shorter time period, which is most useful for showing traffic in the last hour or day. It shows which times of day are busiest.
Most Active Sites
Most Active Sites, or Most Active Orgs for MSP accounts, shows a pie-chart distribution of query traffic across all Sites or Organizations in a selected time period. Use this report to monitor Site and Organization traffic.
Top Requests
Top Requests shows the most frequently requested domains and domain categories for the account. It is useful for adjusting policies: if the report shows many requests for undesirable domains, the Filtering Policy may need updating.
Threats
Threats is similar to Top Requests, broken down by threat domains that DNSFilter prevented. MSP accounts can use this report to show the value of the product to customers.
Alerts
DNSFilter can automatically email a weekly summary of organization activity. Toggle on Enable Weekly Email Threat Reports and enter an email address to receive these emails.
Comments
0 comments
Please sign in to leave a comment.