REPORTING : What would you like to see ?

	Forums Register Login My Profile Inbox Address Book My Subscription My Forums Member List Search FAQ Ticket List Log Out

REPORTING : What would you like to see ?

Logged in as: Guest

Users viewing this topic: none

Printable Version

All Forums >> [Networking & Security] >> GFI LANguard >> REPORTING : What would you like to see ?

Page: [1] 2 next > >>

Message

<< Older Topic Newer Topic >>

REPORTING : What would you like to see ? - 19.Jan.2004 3:17:00 AM

amusc

Posts: 130
Joined: 19.Nov.2002
From: Malta
Status: offline

Work on an improved reporting system is in progress for version 5 of LNSS.

We are interested in the various ways you would like the reporting system to work and what types of reports you would like to generate.

We look forward to your feedback,

Post #: 1

RE: REPORTING : What would you like to see ? - 20.Jan.2004 11:32:00 AM

Jasper

Posts: 10
Joined: 1.Mar.2002
From: Netherlands
Status: offline

Some thoughts:
- Ability to customize the report template (yes I know it is possible in 3.3, but not very easy...)

- Exporting report to .doc or .rtf format.
I've tried to import the 3.3 report into Word but failed to get a readable result (very high table rows for every service banner entry), any thoughts?

- The ability to import previously saved scanresults and generate a different type of report would be great.

(in reply to amusc)

Post #: 2

RE: REPORTING : What would you like to see ? - 26.Jan.2004 2:31:00 PM

Guest

I would like to see some flat file output options (csv). I would need to manage patch levels and un-authorized machines on our network.

(in reply to amusc)

Post #: 3

RE: REPORTING : What would you like to see ? - 26.Jan.2004 6:46:00 PM

rex

Posts: 232
Joined: 28.Oct.2003
From: Santa Cruz, CA
Status: offline

Hi Andre,

Thanks for asking.. Would it be possible to add to the report the IE bowser version? This would be good to have in LanGuard 5.0. because even if you are not running IE as your main web browser, it still needs to be updated (to a higher version) and patched to be in compliance with the MS security updates. Sometimes we users don't care what missing patches IE may need, we just want an easy way to know the browser version and update it if needed.

From what I've heard from MS, new patches for the IE 5.x and 6.x browsers will go away, (lifecycle of the browser), and then Languard won't be able to detect the browser version then..

By default, it should be added to a report along with the MS service pack versions.. IE is one of those browsers that is an open door to security risks.. even if you are not using it, and unfortunately it is installed on every windows system.. [Frown]

Thanks,
Rex

[ January 27, 2004, 04:13 AM: Message edited by: rex ]

(in reply to amusc)

Post #: 4

RE: REPORTING : What would you like to see ? - 26.Jan.2004 11:56:00 PM

ufgeorge

Posts: 327
Joined: 11.Sep.2003
Status: offline

I care about the encoding of report! Please use utf-8, Chinese words can show correctly.

(in reply to amusc)

Post #: 5

RE: REPORTING : What would you like to see ? - 27.Jan.2004 10:31:00 AM

Guest

.csv or a tab delimed .txt. I need to parse it. I can do that with the .xml, but its pretty kluge.

Jerry

(in reply to amusc)

Post #: 6

RE: REPORTING : What would you like to see ? - 15.Apr.2004 2:36:00 PM

gecko2002

Posts: 1
Joined: 14.Apr.2004
From: Charlotte,NC
Status: offline

I would like to see graphs and charts - so that upper mgmt can understand what they are looking at.

(in reply to amusc)

Post #: 7

RE: REPORTING : What would you like to see ? - 27.Apr.2004 11:51:00 AM

bbaker888

Posts: 7
Joined: 25.Apr.2004
Status: offline

Must have the ability to create html reports and html diff reports via the scheduled scan again as was the case with 3.3.

(in reply to amusc)

Post #: 8

RE: REPORTING : What would you like to see ? - 12.May2004 11:44:00 AM

DavidStebbings

Posts: 6
Joined: 11.May2004
Status: offline

I'd like to be able to drill down into the Access/SQL database log and see old scan results, instead of just the XML saved results (often I forget to save the results).

Also I'd like to be able to use these previous scans for patching. Currently you can only patch with the latest scan, so if you scan a bunch of machines, then just double check a single machine, you have to re-scan the machines which can be quite time consuming.

As for the details here goes [Smile]

1) The ability to generate this report per historical scan, for before/after type comparisons.

2) A global summary - I think a bar chart showing the totals of machines with critical/medium/low/zero risks shown with different colours, split to type of patch or vulnerability. This would be empty on a completely secured and patched network, but unlikely to ever happen that way.

e.g. say there are 10 machines, 2 win2k DCs, 2 exchange, 2 SQL, 2 fileservers and 2 web servers on a network that need patching with critical updates

The graph would just show 5 bars, each 2 units high colours critical

Now if one of each server is patched completely, then half of this bar would be shown in the critical colour (Red?) and half in the no-risk colour (green?)

This would allow at a glance an impression of how many servers have critical patches outstanding.

3) A useful improvement would be to be able to assign profiles for each server

For instance we have www servers visible to the internet, for which IIS vulnerabilities are critical, but SMTP vulnerabilities aren't so as the ports are closed on the firewall.

On our trusted network we have all the other type of server, which aren't as critical for IIS vulnerabilities necause their roles are different. However we might class the files servers with any SMB vulnerabilities as critical, but with the IIS ones only medium.

4) The ability to filter reports by OS (i.e. ignore workstation OS's

5) Criticality of patches over time - this would be a line graph showing how many critical/medium/low/zero risks servers there are, compared to what it would be like if they weren't patched.

This would be for QA reports (and to justify to management the maintenance cost of NSS!)

Hope this info is useful [Smile]

David

(in reply to amusc)

Post #: 9

RE: REPORTING : What would you like to see ? - 13.May2004 5:07:00 AM

ksav

Posts: 16
Joined: 3.Feb.2003
Status: offline

Hi,

Nothing too difficult, just .csv, delimited TXT and management graphs, especially against comparison reports.

Many thanks.

(in reply to amusc)

Post #: 10

RE: REPORTING : What would you like to see ? - 13.May2004 7:34:00 AM

Guest

Definitely csv or txt, we take the xml sheets and edit them in excel. It's a LOT of work to get it to look right...

Maybe after that, some type of graph for management to see?

Thanks for asking by the way!

(in reply to amusc)

Post #: 11

RE: REPORTING : What would you like to see ? - 16.May2004 4:45:00 AM

watcher60

Posts: 4
Joined: 20.Feb.2004
From: UK
Status: offline

Definatley a way to produce html reports by the scheduled scans a real big one for me as I'd like tobe able to email the results immediatley in a friendly format to not only myself but other teams.

Some way to pick out you most vulnerable server I realise could do this via using a db but would be nice if it could order the machine by ranking in a filter

(in reply to amusc)

Post #: 12

RE: REPORTING : What would you like to see ? - 15.Sep.2004 6:48:00 PM

offto

Posts: 13
Joined: 1.Jul.2004
From: Oregon
Status: offline

I'd like to have the flag "Password never expires" reported for local users. (LNSS V5) I've never seen this reported on any of my scans.

Thanks!

(in reply to amusc)

Post #: 13

RE: REPORTING : What would you like to see ? - 15.Sep.2004 8:00:00 PM

xnih

Posts: 2465
Joined: 30.May2001
From: Idaho
Status: offline

i think that one is now reported in one of the latest builds. Thought it was added 1 or 2 builds back????

If it hasn't been I know it has already been turned into development since I emailed them on it before.

eric

(in reply to amusc)

Post #: 14

RE: REPORTING : What would you like to see ? - 20.Sep.2004 1:25:00 PM

jthrelfall

Posts: 41
Joined: 20.Jan.2004
From: Illinois
Status: offline

Posted this one a while ago: The ability to run reports from a command line against a saved XML file or against the current data in the SQL backend DB.

Similar to the way you can kick off a scan using a set profile, kick off a report referencing a saved XML or the current SQL data and a named filter - Examples:

Lnsscmd /source=%INSTALLDIR%\Data\Reports\mysource.xml /report=%INSTALLDIR%\Data\Reports\%DATETIME%_Missing_Patches.htm /filter="Missing Patches"

Lnsscmd /source=CURRENT_SQL_DATA /report=%INSTALLDIR%\Data\Reports\%DATETIME%_Missing_Patches.htm /filter="Missing Patches"

(in reply to amusc)

Post #: 15