As far as reporting with Web Gateway, Web Reporter is the intended product to provide this functionality. There has always been a separate reporting product offered at no cost with Webwasher/Web Gateway. Previously it was SmartReporter, about two years ago Web Reporter was released, the current version is Web Reporter 5.1 and can be found at:
https://secure.nai.com/apps/downloads/my_products/login.asp after entering in a valid Grant #
http://www.securecomputing.com/patch.cfm?productid=we&version=500 after entering in a valid WW serial #.
For more reading you can check out Web Reporter's documentation.
There is two modes that Web Reporter can run in, basic and premium. Basic comes at no cost, you get premium for 90 days after that you would need to enter in a premium license key. As far as a cost for that, you'd have to take that up with your sales person.
Let me know if that helps.
We need more clarifications, so what about reports kind, for example we need to see :
-> Top user per session per consumtion (used bandwith) ?
-> Top Destination/ consumtion ?
-> Top Destination / session ?
I am currently have 4500C, and trying to get reporting based on user, sites, traffic, bandwidth consumption, but there is nothing with this expensive product and no way to know what happen to my users.
socheat Have you looked into McAfee CSR? (Content Security Reporter) I'm pretty sure it's free for all licensed Web Gateway customers.
Alternatively, do you have Splunk or any other log management solution available to you?
Thanks, could you just give me direct link to download those software? so that I can install in my workstation and connect to my 4500c to get direct log file? or its will show me the real time report?
I haven't checked this site in a while, so I missed your reply... vkleineh has already provided the location for download, so I'll just reply to your questions.
First, regarding installing on your workstation, whether you use CSR or MWR, they're both large, server-class solutions, so although I'm sure you could get them working on a workstation, it might take some work, and the performance may not be ideal if your specs aren't great.
As for obtaining the logs, there are many ways of architecting this... the server can fetch the logs on a periodic basis, but that requires GUI connectivity (TCP 4712) and would be affected if the GUI service stops working or something. My personal preference is to use the File System Logging setting that generates your log file to set it to push the log periodically via SCP or FTP. There is a section called "Auto Pushing" where you can set this up, define the frequency, etc.
You could also send messages via syslog to a dedicated syslog server if you have one set up. I'm a big fan of sending logs to Splunk and building the equivalent dashboards and reports there instead, but those require custom setup. (There may be a Splunk App for this, but I haven't checked.)
Oh, and on a related note, I'm finally going to publish a number of things in the very near future, including my own custom log rule sets which I find very helpful. If you're interested in exploring alternative options for logging, troubleshooting, and reporting then keep an eye out for that.