Dashboard
SIA provides dashboards that offer insights into threats, DNS traffic, and malicious activity in your network. You can view data in comprehensive predefined dashboards or create custom dashboard with interactive widgets that allow you to track events, clients, risky applications, and more.
Predefined Dashboards
These predefined dashboards are available in Enterprise Center:
- Security Summary. Assesses the risk to your organization’s network and offers recommendations to mitigate threats. The dashboard includes detailed analytics on blocked threats, devices at risk, malicious domains, categories that are known to host malicious content, categories that are potential security risks to your organization, and more. For more information on this dashboard, see Security Summary dashboard.
- Threat Overview. This dashboard contains widgets that show threat events and activity at a high level. This Threat Overview widget shows threats events based on severity, allowing you to focus on the most critical events.
- Security. This dashboard contains widgets that show blocked access control categories, a list of compromised devices, DNS traffic, as well as an overview of threats.
- Operations. This dashboard contains widgets that show installed ETP Clients, errors for ETP Client, DNS activity by locations, overview of threats, and traffic that is directed to SIA Proxy.
Custom Dashboards
You can create a dashboard with widgets that are specific to SIA. These widgets allow you to track events, traffic, ETP Client downloads, risky applications, devices, and more across your organization. The dashboard gives administrators and report viewers the ease of viewing data at a glance. This information allows you to not only learn about the activity or user actions that generated events, but it also gives you the information you need to investigate data in SIA reports and take action to remove threats or compromised machines from your network.
When you add a dashboard, you can select the SIA widgets that you want the dashboard to include. This allows you to create a view that shows the data you need to monitor. For example, you can create a dashboard that’s focused only on HTTP events, while creating another dashboard that tracks risky applications or application operations as part of an application visibility and control configuration.
If your organization is also licensed for Enterprise Application Access or Multi-factor Authentication, you can add widgets for these products.
After you select widgets for the dashboard, you can preview the dashboard and make modifications by adding or removing a widget. Once the dashboard is saved, you cannot add new widgets to it.
When viewing a dashboard, you can filter data to show results for a specific time period. Clicking data in a dashboard directs you to the related SIA report where you can investigate the findings even further.
Enterprise Center also includes predefined dashboards that contain the widgets you’ll need to track threats, traffic, and more. For more information, see Predefined dashboards.
SIA DNS server information is contained in the Connection Info widget. By default, this widget appears in the Threat Overview dashboard. However, you can add it to any dashboard you create. To easily reference this information, consider adding it to your custom dashboards.
Dashboard scheduled reports
From the Dashboard page (Dashboard > Dashboard), you can schedule a report that sends report recipients a snapshot of a dashboard. You can select a dashboard or multiple dashboards that you want to report on. Reports are sent to the email addresses or distribution lists that you provide. If you select more than one dashboard, separate reports are emailed to report recipients.
A daily dashboard report contains data from the previous 24 hour period (12 AM to 12 AM). A weekly report contains data for the seven days prior to the selected week day. For example, if you select to run a weekly Monday report, the report shows data for events or activity that occurred from the previous Monday (12 AM) to the most recent Monday (12 AM). Data is shown in the time zone you selected. For more information on scheduled reports, see Scheduled reports and notifications.
At this time, you cannot schedule a report for the Security Summary dashboard.
Add a dashboard
Complete this procedure to add a dashboard. As part of this process, you must add widgets. The widgets you add show mock data until you save the new dashboard.
To add a dashboard:
-
In the navigation menu, select Dashboard > Dashboard.
-
Click the menu icon and select Add Dashboard.
-
Enter a dashboard name, and click Select Widgets.
-
Click Threat Protection or navigate to the Threat Protection section. Depending on your license, you may have access to additional widgets for the Enterprise Application Access and Multi-factor Authentication products.
The widgets in this view appear with mock data. -
Select the widgets that you want to add to the dashboard.
Consider adding the Connection Info widget to reference the SIA DNS server IP addresses and other information. You may need this information for a future configuration. For example, the DNS server information is necessary for DNS forwarding.
-
Click Preview. A preview of your dashboard appears. The widgets show mock data until you save the dashboard.
-
To add another widget, click the Add Widget icon, and repeat steps 5 and 6.
-
Click Save.
Next steps
To filter data that appears in the dashboard by date and time, see Filter data based on date and time.
Edit a dashboard
Complete this procedure to edit a dashboard.
To edit a dashboard:
-
In the navigation menu, select Dashboard > Dashboard.
-
From the provided menu, select the dashboard that you want to edit.
-
Click the menu icon and select Edit Dashboard.
-
Click Threat Protection or navigate to the Threat Protection section. Depending on your license, you may have access to additional widgets for the Enterprise Application Access and Multi-factor Authentication products.
The widgets in this view appear with mock data. -
Select the widgets that you want to add to the dashboard.
-
Click Preview. A preview of your dashboard appears. The widgets show mock data until you save the dashboard.
-
To add another widget, click the Add Widget icon, and repeat steps 4 to 6.
-
Click Save.
Copy the URL of a dashboard
You can copy the URL of a dashboard and send it to another administrator who has access to SIA.
To copy the URL of a dashboard:
-
In the navigation menu, select Dashboard > Dashboard.
-
From the provided menu, select the dashboard that you want to share with another SIA administrator.
-
Click the menu icon and select Copy URL. The URL is copied to your clipboard.
Next steps
Securely send the URL to the SIA administrator.
Download a PDF of a dashboard
After a dashboard loads with data, you can download an image of the dashboard in a PDF. The PDF captures the data and graphs that appear in the dashboard.
To download a PDF of a dashboard:
-
In the navigation menu, select Dashboard > Dashboard.
-
From the provided menu, select the dashboard that you want to capture in a PDF.
-
To show data based on a specific date and time, see Filter data based on date and time.
-
Click the menu icon and select Download PDF. This option is available to select after a dashboard completely loads with data.
If prompted by your browser to save the PDF, save the file to an accessible location on your computer. Otherwise, you can find the file wherever your browser saves downloaded files.
Delete a dashboard
Complete this procedure to delete a dashboard.
To delete a dashboard:
-
In the navigation menu, select Dashboard > Dashboard.
-
From the provided menu, select the dashboard that you want to delete.
-
Click the menu icon and select Delete Dashboard.
-
Click Yes to confirm the deletion.
Set a default dashboard
You can define the default dashboard that appears when administrators navigate to the Dashboard page. As an administrator, you can set this in SIA. If your account includes more than one contract, these instructions are for setting the default dashboard in an individual contract.
To set a default dashboard:
-
In the navigation menu, select Dashboard > Dashboard.
-
From the provided menu, select the dashboard that you want to make the default.
-
Click Set as Default. If this option does not appear, the dashboard is already set as the default.
Schedule a dashboard report
From the Dashboard page, you can schedule a daily or weekly report that provides a snapshot of a dashboard. If you select more than one dashboard, report recipients receive a separate report for each dashboard. For more information on scheduled reports, see Scheduled reports and notifications.
At this time, you cannot schedule a report for the Security Summary dashboard.
To schedule a dashboard report:
- In the navigation menu, select Dashboard > Dashboard.
- On the Dashboard page, click the graph icon. The Schedule a dashboard report window appears.
- Select a dashboard or multiple dashboards.
- For report recipients, enter the email addresses or distribution list address for report recipients.
- For the report frequence, complete these steps:
- Select whether you want to run a daily or weekly report. If you want to run a weekly report, you can select a specific day of the week.
- In the second menu, select the time zone.
- Click Save.
Updated about 2 months ago