Filter
Top Products
67-18
User Guide for Cisco Security Manager 4.4
OL-28826-01
Chapter 67 Managing Reports
Working with Reports in Report Manager
• IPS Simulation Mode—This report provides a comparison of alerts in inline (IPS) and promiscuous
(IDS or IPS simulation) modes. The report shows the number and percentage of alerts based on
mode, either Non Simulation Count (inline) or Simulation Mode Count (promiscuous). The IPS
sensor cannot directly block attacks that occur in promiscuous mode.
When working with IPS events, the Report Manager component of Cisco Security Manager reports
events individually; the Event Viewer component of Cisco Security Manager displays alerts. In the Event
Viewer component, the IPS Summarizer groups events into a single alert, thus decreasing the number of
alerts that the IPS sensor sends out.
Tip Cisco IPS Manager Express (IME) and Cisco Security Manager do not summarize events in precisely
the same way.
The parameter used to define the reporting time period is defined in the system defaults as described in
Configuring Default Settings for Reports, page 67-24. You can also edit the report settings and create
custom versions of the reports, as described in the following topics:
• Editing Report Settings, page 67-21
• Creating Custom Reports, page 67-20
Working with Reports in Report Manager
Use the Report Manager application to view security and usage reports for devices and remote access
IPsec and SSL VPNs. The following topics explain the basics of creating reports. For information on
working with report schedules, see Scheduling Reports, page 67-27.
This section contains the following topics:
• Opening and Generating Reports, page 67-18
• Creating Custom Reports, page 67-20
• Editing Report Settings, page 67-21
• Printing Reports, page 67-23
• Exporting Reports, page 67-23
• Configuring Default Settings for Reports, page 67-24
• Arranging Report Windows, page 67-25
• Saving Reports, page 67-25
• Renaming Reports, page 67-26
• Closing Report Windows, page 67-26
• Deleting Reports, page 67-27
• Managing Custom Reports, page 67-27
Opening and Generating Reports
Reports are not static. When you open a report, it contains no data, although it does contain settings that
define the data that shall be used to generate the report. Thus, to view a report, you need to open it and
then generate it. This procedure explains the process.