Chapter 7 - Reports

Applies to: Microsoft Antigen

The Antigen Enterprise Manager can collect information from all of the managed servers and generate reports on a variety of Antigen related topics. The main Report categories are.

• Detection Reports
• SMTP Traffic Reports
• Engine Versions

The AEM regularly polls all of managed servers to collect data about scanner activity, engine versions, and SMTP traffic. The polling interval is set in the Global Configuration work pane as described in the Administration chapter.

The reports available in each category are described below.

Detection Reports

Detection Reports are used to collect and present data about the number of viruses, filter matches, and spam incidents detected during a certain period on selected or multiple servers running Antigen. The report options include:

• Virus Detection Summary
• Virus Action Report
• Virus Action Summary
• Top N Viruses Found
• Spam Detection Report
• Spam Detection Summary
• Spam Action Report
• Spam Action Summary
• Content Filter Report
• Content Filter Summary
• File Filter Report
• File Filter Report Summary
• Filter Action Report
• Filter Action Summary
• Filter Statistics

SMTP Traffic Reports

SMTP Traffic Reports are used to collect and present data about the amount of activity on selected SMTP servers running Antigen. The reports include:

• SMTP Messages Processed
• SMTP Messages Processed Summary
• SMTP Bytes Processed
• SMTP Bytes Processed Summary

Engine Versions

Engine Version Reports are used to collect and present data about the anti-virus and anti-spam engine versions on selected or multiple Exchange servers running Antigen. The report options include:

• Engine Versions Report

Configuring and Running Reports

To run any of the reports, open the desired category by clicking on the category name in the Reports section of the Navigation area, then click on the report that you would like the AEM to generate. Follow the steps below to configure and run the selected report: (The Virus Detection report will be configured in the steps below as an example. All reports are configured and run following the same basic steps, with the exception of Engine Version reports that are described later.)

To configure and run the selected report, follow the steps below:

1. Click Detection Reports in the Reports section of the Navigation area. The Detection Reports work pane will open.
2. Click Virus Detection Reports in the reports list. The Report Parameters work pane will open as shown in the image below.
   
3. Complete the following information:

After you have completed all fields, click OK to generate the report. The report will be displayed in a separate window. A sample report is shown below:

Configuring and Running the Engine Versions Report

The only report that is configured differently is the Engine Versions report.

To configure and run the Engine Versions report, follow these steps:

1. Click Engine Versions in the Reports section of the Navigation area. The Report Parameters work pane is displayed.

2. Select the servers from which to collect version data.

3. Click OK to generate the report in a separate window.

To configure this report, select the servers from which to collect version data and click the OK button.

Saving Reports

Reports generated by the AEM can be saved for later use. AEM reports can be saved as HTM or MHT files.

• If you save a report as an HTM file, a sub-directory is created to store the image files used in the report. If you subsequently copy or move the report file to another location, the associated image directory will be copied or moved automatically.
• If you save a report as an MHT file, an HTML archive file is created that includes all the image files used in the report. This simplifies e-mailing and sending reports, as they are completely self-contained.

To save a report, follow these steps:

1. Run the desired report.
2. Choose File-> Save As from the report window.
3. Give the file a name and a location. (It is recommended that you create a new folder for each report.)
4. Indicate the type of file to create: HTM (the default) or MHT (Web Archive).
5. Click Save.

Scheduling E-Mail Reports

Administrators can also schedule reports in the AEM that will be e-mailed to an administrator configured list of recipients. Reports are sent as mht archive files and can be viewed using Internet Explorer, Microsoft Word, Microsoft Outlook, and other Microsoft products.

Follow the steps below to configure a scheduled report:

1. Click Jobs in the Job Management section of the Navigation area. The Manage Jobs work pane is displayed.

2. Select Schedule Report Job, and then click Create. The Schedule Report Job work pane will be displayed

3. Complete the following fields:

   1. *Job Name—*Set the interval for the AEM to send the reports (in hours).
   2. *Schedule Report—*Enter the Subject Line, e-mail body text, and e-mail recipients.
   3. *E-mail Notifications—*Enter the Subject Line, e-mail body text, and e-mail recipients.
   4. *Select Report—*Select the report you would like AEM to run. You may only schedule one report at a time. Multiple reports must be scheduled individually.
   5. *Select Products—*Select the products you would like to include in the report.
   6. *Time Interval—*Select the time interval for the report. You can choose one day, one week, one month, or one year.
   7. *Select Servers—*Select the servers that should be included in the report.

4. Click Finish to save the scheduled report job.

The report will run at the indicated time and be sent to the designated recipients. If you selected Don’t Schedule Reports, you must run the report manually by clicking Run Now. When the report has run, you can either click View Report to see it or Send Report to have it e-mailed to the designated recipients.