Barracuda Report Creator

The Barracuda Report Creator creates customized reports using statistics and logs collected on CloudGen Firewalls. Each report can be configured to use multiple appliances, custom or predefined report data templates, and a customizable layout and delivery method. Reports for managed firewalls are collected directly from the firewall and not the Control Center. Custom reports can include the following information:

• User Activity Reports – Includes information on traffic caused by individual users, IP addresses or networks, or Active Directory user groups.

• Address Activity Reports – Includes information for accessed URL categories per source IP address or network.

• URL Category Reports – Includes information on which URLs were accessed in this specific URL category per source IP address or network.

• Application Category Reports – Includes information on detected application categories.

• Application Property Reports – Includes information on top blocked or allowed application properties.

• Applications Reports – Includes information on detected applications in a specific application category per source IP address or network.

• Security Reports – Includes IPS, Virus Scanner, and ATP threat reports.

• VPN Usage Reports – Includes information on usage of TINA client-to-site and site-to-site tunnels.

Limitations

• Microsoft .NET Framework 4.0 Client Profile is not contained in the installation archive for the Report Creator.

• Application Control data displayed in the Report Creator might not include the entire data set for the specified time period because old data may be deleted on the firewall if the disc space gets too low. Due to this limitation, the Report Creator is not suitable for comprehensive auditing purposes. In this case, use FW Audit instead. For more information, see FW Audit.

Download the Report Creator from the Barracuda Download Portal, double-click to start the installation, then follow the on-screen instructions.

Add a dedicated administrator or a CC admin for Report Creator depending on if you are connecting to a standalone or managed firewall:

The administrator must be included in the Security role:

1. On the firewall, go to CONFIGURATION > Configuration Tree > Box > Administrators.

2. Click Lock.

3. Create or edit the administrator account to be used by the Report Creator.

4. Add Security to the Assigned Roles for the administrator.
   

5. Click OK.

6. Click Send Changes and Activate.

The CC administrator must have access to the Control and Firewall modules.

1. On the Control Center, go to CONFIGURATION > Configuration Tree > Multi-Range > Global Settings > Administrative Roles.

2. Click Lock.

3. In the Administrative Role Configuration, click + to add a new role.

4. In the Control section, select the Access to Control check box. You do not have to enable any additional options in the Control Permissions section.
   

5. In the Firewall service section, select the Access to Firewall service check box. You do not have to enable any additional options in the Firewall service section.

6. Click OK.

7. Click Send Changes and Activate.

Add the firewalls to be queried when creating a report. Use the administrator user created in Step 1 to connect.

1. Launch the Report Creator Configuration.

2. Click the Templates tab.

3. In the Appliances section in the left pane, click the plus sign.

4. Select CloudGen Firewall from the Type list.

5. Enter the Management IP or Hostname of the firewall.

6. Enter the Login and Password.

7. Click Test Connection to verify that the Report Creator can connect to the appliance.

8. Click Save.
   

If you are creating reports for a large number of firewalls, sort them into Consolidation Groups:

1. Click the Templates tab.

2. In the left menu, click Consolidation Groups.

3. Click the plus sign.

4. Right-click the group name, select Rename, and enter a name.

5. In the Consolidation Group "Group name" section, select the firewalls you want to add and click the right arrow icon to add them to the Appliances in this Group list.

6. Click Save. 

The Report Creator is now configured to create reports containing selected data from your firewalls.

The Report Data templates specify the type of information included in the report.

1. Click the Templates tab.

2. In the left menu, click Report Data.

3. To modify the settings, select the predefined report in the Report Data section.

4. Change the settings as necessary. For example, change the time span, or enable Source IP Address Anonymization if you do not want to include the source address in the report.
   

5. Click Save.

You can use custom or predefined reports. For more information, see How to Create Custom Reports.