WatchGuard Advanced Reporting Tool
Actionable IT and Security Intelligence

Overview:

STRENGTHEN YOUR SECURITY POSTURE PROACTIVELY

The increase in the volume of security data handled by organizations prevents IT Teams from adequately focusing on essential details. This information can be used to detect security issues and breaches caused by both external factors and company insiders.

Security professionals are overwhelmed with the amount of data. The large volumes of information handled and the appearance of next-generation malware causes many details to be overlooked or not registered, compromising the entire system’s security.

Key Features:

Flexible Analysis Adapted to Your Needs

The Advanced Reporting Tool incorporates dashboards with key indicators, search options and default alerts for three specific areas:

• Security incidents
• Access to critical information
• Application and network resource usage
• Adapt searches and key information alerts to your business needs

Security Incident Information

Generate security intelligence, processing and correlating the events generated during intrusion attempts:

• Calendar charts showing the malware, PUPs and exploits detected over the last year
• Computers with most infection attempts and malware specimens detected
• Pinpoint computers with vulnerable applications
• Malware, PUPs and exploit execution status

Shadow IT Discovery

• Most and least frequently executed applications
• Scripting applications executed (PowerShell, Linux shell, Windows cmd, etc)
• Remote access applications executed (TeamViewer, VNC, etc)
• Unwanted freeware applications executed (Emule, torrent, etc)

Network Resource Usage Patterns

Discover IT resource usage patterns to define and enforce security policies:

• Find the corporate and non-corporate applications run on your network
• Vulnerable applications run or installed on the network that may lead to infections, have an impact on business performance
• MS Office license control, used vs. purchased
• Applications with highest bandwidth consumption

Control Access To Business Data

Shows access to confidential data files across the network:

• Files most commonly accessed and run by network users
• Calendar charts and maps showing the data sent over the last year
• Which users have accessed certain computers on the network
• Countries that receive the most connections from your network

Real Time Alerts

Configure alerts based on events that can reveal a security breach or the infringement of a corporate data management policy:

• Default alerts indicating risk situations
• Define custom alerts based on user-created queries
• Seven delivery methods (on-screen and via email, JSON, Service Desk, Jira, Pushovery, and PagerDuty)

Documentation:

Download the WatchGuard Advanced Reporting Tool Datasheet (.PDF)