How Content Security Reporter works

Content Security Reporter uses several elements that work together to provide reporting capabilities.

Figure 1. Content Security Reporter workflow

To successfully set up, use, and maintain Content Security Reporter, understand the role for each of the Content Security Reporter elements.



Content Security Reporter Number Description
1 On managed systems, an alert or event occurs. Depending on your configuration, the alert or event is logged to the Content Security Reporter database.
2a

The Content Security Reporter database saves the alert, authentication, email, and web data.

2b

Web Gateway captures and logs the web event. It sends the logs to the Content Security Reporter database.

2c

Advanced Threat Defense captures and logs the event. It sends the logs to the Content Security Reporter database.

3 A Content Security Reporter query retrieves data from its database and defines how it is displayed.
4 A Content Security Reporter filter limits the data to specific users, websites, and threat reputations. The data is displayed in the McAfee ePO.
5a Dashboard — Organizes your data in a customized view to provide detailed information for analysis.
5b Report — Combines queries, filters, and other elements into a PDF to provide detailed information for analysis.