The following table describes the commands on the menus in Report Manager.

The left pane of the Reports tab in Report Manager displays a list of available reports, as shown in the following illustration.

This image is not available in preview/cisco.com

The Report List includes the following controls (illustration call-outs cited):

• Quick Filter search box (1)—Use the quick filter search box to search for reports in the list. The list is filtered as you type, although folders are not opened automatically. The default is to search for the text string anywhere in the report name. However, you can click the down arrow in the Quick Filter box to select a variety of options to change how your search string is evaluated.

• List of reports (2)—The list is organized into folders; the System Reports are predefined reports (explained in Understanding the Predefined System Reports in Report Manager), whereas the My Reports folder contains the custom reports that you create. Double-click a report to open it, or select the report and select File > Open. For more information, see Opening and Generating Reports.

• Right-click shortcut menu (not shown)—If you right-click on a report, you get a list of additional commands that you can perform, such as opening the report, creating a schedule, or saving the report as a new report.

• Edit button (3)—Click the Edit button to change the name of the selected custom report. You can edit custom reports only. For more information, see Renaming Reports.

• Delete button (4)—Click the Delete button to delete the selected custom report. You can delete custom reports only. For more information, see Deleting Reports

• Push Pin button (5)—Click the Push Pin icon to control whether the report list pane is opened or closed. If the pin is vertical, the report list remains open unless you maximize the report pane (the right pane). If the pin is horizontal, the report list collapses to the left margin, and you must click the Report List heading in the left margin to open the list.

The top part of the right side of the Reports tab, with a report open, shows the report settings. These settings define the criteria that are used to generate a report. The following illustration shows an example of the report settings pane.

This image is not available in preview/cisco.com

The Report List includes the following controls (illustration call-outs cited):

• Report tab (3)—Although not part of the settings per se, each report appears on its own tab. The settings are the top part of the tab. If you right-click the tab itself, you get a menu of commands that allow you to arrange report windows. For more information, see Arranging Report Windows.

• Heading and toolbar (2)—The top of the settings pane includes the heading (for example, Top Sources - Settings) and a row of buttons for manipulating the settings. You can open or close the pane by clicking the heading or the up arrow button in the far right of the toolbar. The other buttons have the following functions:

  • Create Schedule button—Creates a new schedule for automatically generating reports based on these settings. For more information, see Configuring Report Schedules

    Edit button—Edits the report settings. For more information, see Editing Report Settings.

  • Save As button—Saves the report as a new report. If you edit the settings for a predefined system report, and you want to save your changes, you must use Save As to create a custom report. For more information, see Saving Reports and Creating Custom Reports.

  • Save button—Saves changes to the settings. You can save changes for custom reports only. For more information, see Saving Reports.

  • Reset button—Resets the settings to the last saved values.

  • Expand/Collapse button (double up/down arrows)—Toggles between opening and closing the report setting pane.

• Settings display (1)—Below the heading and toolbar is a summarization of the report settings. Information includes the type of report, the devices included in the report, the time range, a description, the schedules defined for the report, and other properties unique to the report.

To change the description, type your changes directly into the Description edit box.

The bottom part of the right side of the Reports tab, with a report open, shows the generated report and report toolbar. This pane displays the results of clicking the Generate Report button.

The following illustration shows an example of the generated report pane and its associated report toolbar.

This image is not available in preview/cisco.com

The Report List includes the following controls (illustration call-outs cited):

• Report toolbar (1)—The top of the generated report pane is a row of controls for generating and manipulating reports. The controls have the following functions:

  • Generate Report button—Generates a report based on the criteria defined in the report settings (in the upper pane). For more information, see Opening and Generating Reports.

  • Print button—Prints the generated report. For more information, see Printing Reports.

  • Export button—Exports the report. Click the down arrow in the button and select the type of file you want to create: As PDF (for Adobe Acrobat) or As CSV (for comma-separated values). For more information, see Exporting Reports.

  • Chart Type—Determines the type of graphical chart displayed in the upper part of the report, typically pie, bar, and XY (linear) graphs are available. In some cases, you do not have a choice of chart types. For more information, see Opening and Generating Reports.

• Graphical view (2, 3, 5)—The top part of the generated report shows a graphical, color-coded view of the report data, and includes a legend that explains the colors. Also included is the date and time the report was generated.

Note

For the Top Destinations, Top Services, and Top Sources firewall reports and the Top Attackers, Top Signatures, and Top Victims IPS reports, you can click on a data point in the Pie, XY, or Bar graph to see additional details for that data point. For example, if you click on a slice in the Pie chart for the Top Signatures report, you will see report details for the top attackers and top victims for the selected signature. For more information, see Drilling Down into Report Data.

At the bottom of the graphical view are the following controls:

• Up and Down arrows (5)—These icon buttons, to the left of the graphic, allow you to open and close the graphical part of the report.

• Window size control (3)—If you hover the mouse pointer over the vertical dashes below the graphic in the center of the window, you can click and move the pointer to change the size of the graphical portion of the report. The graphic is automatically resized as you increase or decrease the size of the area. In fact, you can hover over any part of the top of the table to access this control.

• Tabular view (4)—The bottom part of the report is a table that presents the data collected for the report and used to produce the graphic. The columns in the table vary according to the type of report.

You can click a heading to sort the table by the column. There are three sort orders, and clicking the column heading cycles through these orders with an arrow indicating the sort order: ascending (up arrow), descending (down arrow), and no sort (empty). You can use Ctrl+click to create a second sort order on a separate column, which has an effect only if the first sort column repeats one or more entry. Numbers indicate whether the column is the first, second, third, and so on, sort criteria.

Report Manager includes predefined system reports that you can use to identify the top destinations, services, and sources for firewall ACL events. The statistics are based on the events collected by the Event Manager service (as displayed in Event Viewer).

The following reports are available in the System Reports > FW folder.

• Top Destinations—This report ranks the session destinations of all built/deny firewall events received by Security Manager. The report shows the destination IP address, the count of the number of events for each address, and the percentage of the count compared to the sum of all counts in the report. You can click on a data point in the Pie, XY, or Bar graph that represents a specific destination to see report information about the top sources and top services associated with that destination (see Drilling Down into Report Data).

• Top Sources—This report ranks the session sources of all built/deny firewall events received by Security Manager. The report shows the source IP address, the count of the number of events for each address, and the percentage of the count compared to the sum of all counts in the report. You can click on a data point in the Pie, XY, or Bar graph that represents a specific source to see report information about the top destinations and top services associated with that source (see Drilling Down into Report Data).

• Top Services—This report ranks the destination services of all built/deny firewall events received by Security Manager. TCP and UDP services include the port number. The report shows the service, the count of the number of events for each service, and the percentage of the count compared to the sum of all counts in the report. You can click on a data point in the Pie, XY, or Bar graph that represents a specific service to see report information about the top destinations and top sources associated with that service (see Drilling Down into Report Data).

The parameters used to define the number of addresses or services to included in the report and the reporting time period are defined in the system defaults as described in Configuring Default Settings for Reports.

You can also edit the report settings and create custom versions of the reports. You can narrow the reports to focus on specific sets of source or destination addresses or services, or on just permit or deny actions, or limit the report to focus on a sub-set of firewall devices, as described in the following topics:

• Editing Report Settings

• Creating Custom Reports

Report Manager includes predefined system reports that you can use to analyze botnet traffic filtering. The statistics are based on the botnet events collected by the Event Manager service (as displayed in Event Viewer) for blocklisted and gray-listed sites.

For more information about botnet, see Understanding Botnet Traffic Filtering.

The following reports are available in the System Reports > FW > Summary Botnet folder.

• Top Infected Hosts—This report ranks the top infected hosts for traffic originating from infected hosts to black- or gray-listed sites based on all botnet events received by Security Manager. The report shows the IP address of the infected host with the firewall interface name on which the event was detected in parentheses, the count of the number of connections logged to blocklisted or gray-listed sites for each address, the count of the number of connections that were blocked (dropped) by botnet traffic filtering, and the percentage of the count compared to the sum of all counts in the report.

• Top Malware Ports—This report ranks the top destination ports for traffic originating from infected hosts to black or gray-listed sites based on all botnet events received by Security Manager. The report shows the destination malware port, the count of the number of connections logged to blocklisted or gray-listed sites for each port, the count of the number of connections that were blocked (dropped) by botnet traffic filtering, and the percentage of the count compared to the sum of all counts in the report.

• Top Malware Sites—This report ranks the top botnet sites (black or gray-listed sites) for all inbound and outbound sessions based on all botnet events received by Security Manager. The report shows the following information:

  • IP Address—The IP address that is indicated as the malicious host in botnet events, either on the block list or the grey list.

  • Malware Site—The domain name or IP address in the dynamic filter database to which the traffic was initiated.

  • List Type—Whether the site is on the black list or the grey list.

  • Connections Logged—The count of the number of connections logged or monitored for each site.

  • Connections Blocked—The count of the number of connections that were blocked (dropped) by botnet traffic filtering for each site.

  • Threat Level—The botnet threat level for the site, rom very low to very high, or none.

  • Category—The category of threat the site poses as defined in the botnet database, such as botnet, Trojan, spyware, and so on.

The parameters used to define the number of hosts, ports, or sites in the report and the reporting time period are defined in the system defaults as described in Configuring Default Settings for Reports. You can also edit the report settings and create custom versions of the reports, as described in the following topics:

• Editing Report Settings

• Creating Custom Reports

Report Manager includes predefined system reports that you can use to identify the top remote access VPN users based on bandwidth usage, duration of connection to your network, and data throughput. Separate reports are provided based on the type of connection made by the user.

These reports are available in the System Reports > VPN folder in the AnyConnect (SSL) Remote Access VPN, Cisco VPN Client (IPsec) Remote Access VPN, and Clientless SSL VPN.

The following reports are available in each folder. Each report is specific to the connection type indicated by the folder name and also included in parentheses in the report name.

• Top Bandwidth Users—This report ranks the VPN users who consumed the most bandwidth. The report shows the usernames, the bandwidth in total number of bytes sent and received, and the percentage of reported bandwidth used by each user.

• Top Duration Users—This report ranks the VPN users who remained connected to the network for the longest time. The report shows the usernames, the connection duration time in days hours:minutes:seconds format, and the percentage of the reported duration by each user. The chart shows duration in seconds.

• Top Throughput Users—This report ranks the VPN users who sent and received data at the highest throughput rate. The report shows the usernames, the throughput for each user in kbps, and the percentage of reported throughput by each user. The throughput is calculated as 8.0*(bandwidth of the user in bytes)/(duration for which the user is connected in seconds*1000.0).

The parameters used to define the number of users included in the report and the reporting time period are defined in the system defaults as described in Configuring Default Settings for Reports. You can also edit the report settings and create custom versions of the reports, including focusing on specific users, as described in the following topics:

• Editing Report Settings

• Creating Custom Reports

Report Manager includes predefined system reports that you can use to analyze general remote access VPN usage in your network. These reports are not specific to the connection types used in the VPN.

The following reports are available in the System Reports > VPN folder.

• Connection Profile Report—This report provides a count of user, session, and summary of the bandwidth utilization and throughput usage for each remote access connection profile.

The default report contains this information for all devices for the previous hour. You can customize the report in several different ways (see Editing Report Settings).

• User Report—This report provides a summary of the bandwidth utilization, connection duration and throughput usage for each remote access VPN user. The report shows the usernames, the bandwidth in total number of bytes sent and received, the connection duration time in days hours:minutes:seconds format, and the throughput for each user in kbps. The throughput is calculated as 8.0*(bandwidth of the user in bytes)/(duration for which the user is connected in seconds*1000.0).

Beginning with Security Manager 4.7, the User Report provides both user-level details and session-level details:

• • User-Level Details—For a particular user, the user-level details represent the combined value of all that user’s sessions: Username, Total no. of Sessions, Bandwidth, Duration, and Throughput.

Note	Starting from Cisco Security Manager 4.13, the Public IP and Assigned IP details are also displayed as part of the User-Level Details in the general VPN report.

• • Session-Level Details—Expanding the tree displays the session-level details for each session that a particular user has a VPN connection with; the session-level details encompass the Session ID, Login Time, Logout Time, Bandwidth, Throughput, and Duration of the Session. (Here the logout time is calculated by using the formula Logout Time = Login Time + Duration.)

The default report includes information for all connection technologies and all users. You can customize the report to focus on a single technology type or one or more specific users (see Editing Report Settings).

The "Criteria" section of the User Report has filters for Technology (All, Clientless, Full Client, and IPSec RA), Username, and User Session Duration (<= and >= in hours).

• VPN Device Usage Report—This report provides a summary of the usage statistics for each device that hosts remote access VPN connections. The report shows the device (using the Security Manager display name), the average number of users logged into the VPN at any given time during the reported time range, the total bandwidth of all users in the VPN in bytes (sent and received), the total connection duration time in days hours:minutes:seconds format, and the average throughput in kbps at any given time during this report period.

The default report includes information for all connection technologies. You can customize the report to focus on a single technology type (see Editing Report Settings).

The parameter used to define the reporting time period is defined in the system defaults as described in Configuring Default Settings for Reports. You can also edit the report settings and create custom versions of the reports, as described in the following topics:

• Configuring Default Settings for Reports

• Creating Custom Reports

Note	From version 4.17, though Cisco Security Manager continues to support IPS features/functionality, it does not support any bug fixes or enhancements.

Report Manager includes predefined system reports that you can use to analyze top attackers, victims, and signatures for IPS alerts in your network.

The following reports are available in the System Reports > IPS folder.

• Top Attackers—This report ranks the attacker (source) addresses that generated the highest numbers of recorded IPS alerts. The report shows the attacker IP address, the count of the number of alerts for each address, and the percentage of the count compared to the sum of all counts in the report. You can click on a data point in the Pie, XY, or Bar graph that represents a specific attacker to see report information about the top signatures and top victims associated with that attacker (see Drilling Down into Report Data).

The default report includes information for all attackers, victims, and signatures for both blocked and unblocked actions. You can customize the report to focus on subsets of attackers, victims, or signatures, or limit the analysis to blocked only or unblocked only actions (see Editing Report Settings).

• Top Victims—This report ranks the victim (destination) addresses that generated the highest numbers of recorded IPS alerts. The report shows the victim address, the count of the number of alerts for each address, and the percentage of the count compared to the sum of all counts in the report. You can click on a data point in the Pie, XY, or Bar graph that represents a specific victim to see report information about the top signatures and top attackers associated with that victim (see Drilling Down into Report Data).

The default report includes information for all attackers, victims, and signatures for both blocked and unblocked actions. You can customize the report to focus on subsets of attackers, victims, or signatures, or limit the analysis to blocked only or unblocked only actions (see Editing Report Settings).

• Top Signatures—This report ranks the signatures that fired the highest numbers of alerts. The report shows the signature ID number, the name of the signature, the count of the number of alerts for each signature, and the percentage of the count compared to the sum of all counts in the report. You can click on a data point in the Pie, XY, or Bar graph that represents a specific signature to see report information about the top victims and top attackers associated with that signature (see Drilling Down into Report Data).

The default report includes information for all attackers, victims, and signatures for both blocked and unblocked actions. You can customize the report to focus on subsets of attackers, victims, or signatures, or limit the analysis to blocked only or unblocked only actions (see Editing Report Settings).

• Top Blocked/Unblocked Signatures—This report ranks the signatures that blocked the highest numbers of attacks. The report shows the signature ID number, the name of the signature, the count of the number of alerts for each signature, and the percentage of the count compared to the sum of all counts in the report.

The default report shows blocked actions only. However, you can customize the report to show unblocked only or a combination of blocked and unblocked actions (see Editing Report Settings).

If you want to see blocked or unblocked lists that are limited to specific attacker or victim addresses, or to a subset of signatures, use the Top Signatures report instead of the Top Blocked/Unblocked Signatures report. Customize the report to show blocked only or unblocked only signatures.

• IPS Target Analysis—This report provides the top targets by signature and frequency of attack. The report shows the signatures that generated the alerts, the number of alerts, and the victim IP address, and is based on an aggregated view of the Top Signatures and Top Victims reports. The report contains up to ten signatures and five attackers. The information is plotted on a scatter plot, which is the only graphical representation available for the report.

The parameters used to define the number of addresses or signatures to included in the report and the reporting time period are defined in the system defaults as described in Configuring Report Schedules. You can also edit the report settings and create custom versions of the reports, as described in the following topics:

• Editing Report Settings

• Creating Custom Reports

Note	From version 4.17, though Cisco Security Manager continues to support IPS features/functionality, it does not support any bug fixes or enhancements.

Report Manager includes predefined system reports that you can use to analyze general IPS activity in your network.

The following reports are available in the System Reports > IPS folder.

• Inspection/Global Correlation—This report provides a comparison of alerts generated by global correlation against alerts generated by traditional IPS inspection. The report shows the number and percentage of alerts per IPS inspection method (either Global Correlation or Inspection).

• IPS Simulation Mode—This report provides a comparison of alerts in inline (IPS) and promiscuous (IDS or IPS simulation) modes. The report shows the number and percentage of alerts based on mode, either Non Simulation Count (inline) or Simulation Mode Count (promiscuous). The IPS sensor cannot directly block attacks that occur in promiscuous mode.

When working with IPS events, the Report Manager component of Cisco Security Manager reports events individually; the Event Viewer component of Cisco Security Manager displays alerts. In the Event Viewer component, the IPS Summarizer groups events into a single alert, thus decreasing the number of alerts that the IPS sensor sends out.

Tip	Cisco IPS Manager Express (IME) and Cisco Security Manager do not summarize events in precisely the same way.

The parameter used to define the reporting time period is defined in the system defaults as described in Configuring Default Settings for Reports. You can also edit the report settings and create custom versions of the reports, as described in the following topics:

• Editing Report Settings

• Creating Custom Reports

The Top Destinations, Top Services, and Top Sources firewall reports and the Top Attackers, Top Signatures, and Top Victims IPS reports allow you to drill down into the report data.

To drill down into one of the supported reports, click on a data point in the Pie, XY, or Bar graph for that report. For example, if you click on a slice in the Pie chart for the Top Signatures report, you will see report details for the top attackers and top victims for the selected signature.

Note	The filter criteria you use for a report affects the data available in the associated drill-down reports. If you apply filters to the report data, only one drill-down report will be shown when drilling down into the report data.

The following table shows the drill-down reports that are shown for each supported report type.

For each of the drill-down reports, you can view a chart or a table of the drill-down data. If you have drilled down into a specific data point in one of the supported reports, the drill-down report graph and tabular data will be included in the printed report and in the exported report data.

The following illustration shows an example of the drill-down report data for the Top Attackers report.

This image is not available in preview/cisco.com

After you generate a report as described in Opening and Generating Reports, you can print it.

Note

If you have opened drill-down reports for a specific data point in the Top Destinations, Top Services, or Top Sources firewall reports or the Top Attackers, Top Signatures, or Top Victims IPS reports, the drill-down report graph and tabular data will be included in the printed report. For more information, see Drilling Down into Report Data.

To print the report, click the Print button above the report. You are prompted to select a printer.

After you generate a report as described in Opening and Generating Reports, you can export it to an Adobe Acrobat (PDF) or comma-separated values (CSV) file.

Exported files include the following information:

• The creation time of the report.

• The settings used to generate the report.

• (PDF only.) The graphical representation of the report data.

• The tabular report data. In PDFs, the information is represented as a table. In CSVs, the information is comma-separated, with the first row being the column headings.

Note

If you have opened drill-down reports for a specific data point in the Top Destinations, Top Services, or Top Sources firewall reports or the Top Attackers, Top Signatures, or Top Victims IPS reports, the drill-down report graph and tabular data will be included in the export. For more information, see Drilling Down into Report Data.

To export the report, click the down arrow in the Export button above the report and select either As PDF or As CSV. You are prompted to select a folder for the report. A default file name is provided, but you can change the file name.

Troubleshooting Report Exporting Error

When we try to export, device status report we get the following error.

"Windows cannot find 'acrord32'. Make sure you typed the name correctly and then try again".

First, the above error occurs if Adobe Reader is not installed on the server. Windows cant located the acrord32.exe file as Adobe is not installed.

Second, Even if Adobe reader is installed, the above error might be thrown.This is an issue which exists in windows XP,Vista, 7,8.1 and 10. This is caused due to failure in opening Adobe Reader. it is a known error and can happen to any application and not just Adobe reader. Microsoft hasn't provided patch for this yet.

Reported reasons why this issue can happen are:

1) Corrupt registry entry

2) Problem while installing Adobe

3) Deleting the default Adobe Reader

<B>Symptom:</B>

When we try to export, device status report we get the following error.

"Windows cannot find 'acrord32'. Make sure you typed the name correctly and then try again"

<B>Conditions:</B>

First,the above error occurs if Adobe Reader is not installed on the server. Windows cant located the acrord32.exe file as Adobe is not installed.

Second, Even if Adobe reader is installed, the above error might be thrown.This is an issue which exists in windows XP,Vista, 7,8.1 and 10. This is caused due to failure in opening Adobe Reader. it is a known error and can happen to any application and not just Adobe reader. Microsoft hasn't provided patch for this yet.

<B>Workaround:</B>

1) If Adobe reader is not installed, install it

2) If Adobe reader is installed and error is still thrown, Go to the location where the file is saved and perform

Open with Adobe Reader action. Even though the error is thrown, the file will be created but it will be without a

format. So we can open it using a PDF reader.

<B>Further Problem Description:</B>

You can open up to five report windows at one time. Reports are opened as tabbed windows in the right pane of the main Report Manager window, in the most recently used area (“tabbed group”) if there is more than one area. The commands to arrange the windows appear if you right-click the tab for the report window as shown in the following illustration.

You have many options for arranging report windows based on your requirements. For example, you might want to compare two reports side-by-side, or remove a report from the main window without closing it.

You can use the following techniques to arrange the report windows to get the view that you desire:

• Floating a report—To remove a report from the main Report Manager window without closing it, right-click the report tab and select Floating. The report is moved to its own window.

If you have already floated a report, you can select Floating to and choose one of the already-floated windows. The report becomes a new tab in that window.

• Docking a report—To move a floating report back to the main Report Manager window, right-click the report tab and select Docking.

• Arranging reports horizontally or vertically for side-to-side comparison—To create a vertical or horizontal arrangement of reports to allow for easy comparison, without floating the reports, right-click the report tab and select New Horizontal Group or New Vertical Group. These commands split the current tabbed group into the selected layout. You must have at least two reports open to use these commands. If you have more than two open reports, and you want all of them in separate windows, you need to use the command multiple times.

• Move reports to different tabbed groups—If you have several open reports, and you have arranged them into horizontal or vertical groups, you can move reports among the groups by right-clicking the report tab and selecting Move to Next Tab Group or Move to Previous Tab Group. The commands appear only if reports are arranged in a manner where such movement is possible:

• Change the orientation of groups—You can switch between horizontal and vertical layouts by right-clicking the report tab and selecting Change Tab Groups Orientation.

If you edit the settings for a report, you must save it to make those changes permanent. However, to save changes to predefined system reports, you must save the report as a custom report.

Tip	When you save a report, you are saving the settings that define the report. You are not saving the generated content of the report. If you want to save the generated content of the report, that is, the graphs and the report data, you must export the report rather than save it.

• To save changes to a custom report, do one of the following in Report Manager:

  • Select File > Save from the menu bar.

  • Click the Save button in the Report Settings toolbar.

• To save your changes as a new custom report, do one of the following to open the Save Report As dialog box:

  • Select File > Save As from the menu bar.

  • Click the Save As button in the Report Settings toolbar.

  • Right-click the report in the reports list and select Save As.

Then, enter a name for the report and optionally a description of the report and click OK. The report is added to the My Reports folder in the reports list.

Note	Report names can be up to 64 characters and contain alphanumeric characters, spaces, hyphens (-), and the underscore character (_). The description can be up to 1024 characters.

You can close any report by clicking the X icon on the report tab. For reports that you have floated, you can simply click the X icon in the window’s title bar.

Tip	When you close a report, none of the generated report data is preserved. If you want to preserve the generated data, you must print it or export it before you close the report window.

You can also use the following techniques to close the report windows without exiting Report Manager:

• Close a report—Select File > Close Report to close the currently-viewed report, or right-click the desired report tab and select Close.

• Close all reports—Select File > Close All Reports, or right-click any report tab and select Close All.

• Close all reports except one—Right-click the report tab of the report you want to keep open and select Close Others.

You can delete custom reports, but you cannot delete predefined system reports.

To delete a custom report, select it in the reports list and click the Delete (trash can) button above the reports list. You are asked to confirm your deletion.

Tip	Deleting a report also deletes any schedules for that report.

If you need to delete another user’s custom report, see Managing Custom Reports.

If you have system administrator or network administrator privileges, you can view a list of custom reports created by all Report Manager users on this Security Manager server.

To view the list of custom reports, select Tools > Custom Report List to open the Manage Custom Reports dialog box. The list shows the report name, the type of report, the type of device analyzed by the report, and the username of the person who created the custom report.

You can use the following controls to manage custom reports from this page:

• Pagination controls—If there are a lot of custom reports, use the pagination controls to move through the list. You can click the buttons to move to the first page, previous page, next page, or last page, or type the page number into the Page X of Y edit box. You can also click the down arrow in the edit box to change the edit box to work by record number rather than page number.

• Delete button—Click this button to delete the selected report. Any schedules (and schedule results) that use the report are also deleted.

• Refresh button—Click this button to update the list with the latest information.

You can view a list of report schedules that are configured in Report Manager. If you have system administrator or network administrator privileges, the list includes all schedules configured on the server, whether you configured them or another user configured them. Users with lesser privileges can see their own schedules only.

To view the list of report schedules, select the Scheduled Reports tab, and if necessary, the Schedule List sub-tab. The list shows the schedule name, description, the report that will be generated by the schedule, the frequency of report generation, the e-mail addresses to which reports are sent (if any), whether the schedule is enabled or disabled, and the username of the person who created the schedule.

You can use the following controls to manage report schedules from this page:

• Pagination controls—If there are a lot of schedules, use the pagination controls (below the table to the left) to move through the list. You can click the buttons to move to the first page, previous page, next page, or last page, or type the page number into the Page X of Y edit box. You can also click the down arrow in the edit box to change the edit box to work by record number rather than page number.

• Add button—Click this button to add a new schedule. For more information, see Configuring Report Schedules.

• Edit button—Click this button to edit the selected schedule. For more information, see Configuring Report Schedules.

• Delete button—Click this button to delete the selected schedule. For more information, see Deleting Report Schedules

• Refresh button—Click this button to update the list with the latest information.

• Enable button—Click this button to enable the selected schedule. The button is active only if the selected schedule is disabled. For more information, see Enabling and Disabling Report Schedules.

• Disable button—Click this button to disable the selected schedule. The button is active only if the selected schedule is disabled. For more information, see Enabling and Disabling Report Schedules.