Solved

DNS Protection Reporting

  • 8 November 2018
  • 6 replies
  • 514 views

Badge +5
Hi,
 
We're currently running a demo of the DNS Protection agent.  So far, I like the ease of install; just enable it on the Webroot SecureAnywhere Endpoint Policy and it gets installed pretty much immediately (next poll).  That's nice.  Also like the DNS protection at the network level - guest wifi, DNS forwarders.  So anything devices on the network get the benefit as well.
 
What I'm not liking is the reporting.  There's no way to do a custom report on a user's web browsing.  And there's no DNS Charts for the Dashboard.  It would be nice to quickly look at the Dashboard and see some charts for Web Browsing - Top Users, Threats Blocked, etc.  We're currently a Forcepoint shop and potentially looking to switch
 
Are there any Reporting updates coming soon to this product?
 
Thanks.
icon

Best answer by JonathanB 13 November 2018, 01:55

I am glad to hear that the install is working well; it is definitely one of the strengths of the solution!
 
In relation to reporting, the Top Active Hosts report is the best report inside the console for capturing user DNS requests.
 
If you are looking for more detailed information, you can use the Webroot Unity API which has a ton of information in regards to DNS usage. Once extracted, this data can be fed into a reporting tool for custom reports. More information on what is available through the API for DNS can be found here:
https://unityapi.webrootcloudav.com/Docs/en/APIDoc/APIReference#apiReference-Console-ConsoleGSM-group-10
 
I am also aware that BrightGauge recently released an integration and has dashboards you can build: https://www.brightgauge.com/webroot
 
Another option we have in the works is a solution that leverages Microsoft Excel.  It uses the API to pull in and report on much of what you are looking for. If you are interested in this, please send me a message I will send over some information on the beta.
 
Hopefully this helps.  Any questions, just ask.
 
Thank you,
 
View original

6 replies

Userlevel 1
Badge +5
I am glad to hear that the install is working well; it is definitely one of the strengths of the solution!
 
In relation to reporting, the Top Active Hosts report is the best report inside the console for capturing user DNS requests.
 
If you are looking for more detailed information, you can use the Webroot Unity API which has a ton of information in regards to DNS usage. Once extracted, this data can be fed into a reporting tool for custom reports. More information on what is available through the API for DNS can be found here:
https://unityapi.webrootcloudav.com/Docs/en/APIDoc/APIReference#apiReference-Console-ConsoleGSM-group-10
 
I am also aware that BrightGauge recently released an integration and has dashboards you can build: https://www.brightgauge.com/webroot
 
Another option we have in the works is a solution that leverages Microsoft Excel.  It uses the API to pull in and report on much of what you are looking for. If you are interested in this, please send me a message I will send over some information on the beta.
 
Hopefully this helps.  Any questions, just ask.
 
Thank you,
 
Badge +5
Thanks, Jonathan.  I'll check out those solutions.  And I'll send you a message regarding the Excel beta.
 
 
 
 
Badge +5
Any other Webroot employees monitoring this?  I sent Jonathan a message 3 weeks ago and haven't heard anything regarding the Excel beta for the DNS protection reporting.  Looks like he hasn't been online here in that same amount of time.
Userlevel 1
Badge +5
Sorry to be slow responding.  Fortunately Anna pointed out your reply to me.  Look for a PM momentarily.
 
Thanks,
Jonathan
Userlevel 5
Badge +11
HI @Duke_Nukem - My apologies for the slowness. Can you please shoot me a pvt mesg with your email and I'll make sure you are connected with the PM to get setup on the Excel plugin reporting.
Badge +5
Hi KKumar, I got everything setup from jonathanB a couple of months ago. Thanks.

Reply