Using Management Center for VPN Routers 1.3
Viewing Reports

Table Of Contents

Viewing Reports

Viewing the Activities Report

Viewing the Deployment Report

Generating the Audit Trail Report

Generating the Hub-Spoke Assignment Report


Viewing Reports


Router MC provides several reports that display information about various Router MC functions.

The following topics provide information about the Router MC reports:

Viewing the Activities Report

Viewing the Deployment Report

Generating the Audit Trail Report

Generating the Hub-Spoke Assignment Report

Viewing the Activities Report

The Activities report lists all existing active activities and provides information for each one, such as its status, who has it open, and which objects are selected in the activity. See Activities Report—GUI Reference for a description of the activities report.


Note Approved or deleted activities are not shown in the activities report.


Procedure


Step 1 Select Reports > Activities. The Activities Report page appears.


Table 1-1 describes the elements displayed in the Activities Report page.

Table 1-1 Activities Report—GUI Reference 

GUI Element
Description

Activity Name column

Displays the name of the activity.

Status column

Displays the status of the activity, either editable or submitted.

Opened by column

Displays the user who has the activity open. Only one user can work in an activity at one time.

Selected Objects column

Displays the objects selected for the activity. These objects are locked. This means that no configuration changes can be made to these objects in another activity.

Rows per page list box

Enables you to change the number of activities displayed in the report.


Viewing the Deployment Report

The Deployment report provides information about the deployment status of every device that you are managing with Router MC. See Deployment Report—GUI Reference for a full description of the deployment report.

Procedure


Step 1 Select Reports > Deployment. The Deployment Report page appears.


Table 1-2 describes the elements displayed in the Deployment Report page.

Table 1-2 Deployment Report—GUI Reference 

GUI Element
Description

Device Name column

Displays the name of the device.

Device Group column

Displays the name of the device group to which the device belongs.

Device Type column

Displays the device's role in your VPN, either hub, spoke or unmanaged spoke.

Job Name column

Displays the last job in which the device was included.

Job Status column

Displays the status of the job specified in the Job Name column.

Generating—Configurations for the devices in the job are currently being generated.

Generated—Configurations for all the devices in the job have been generated.

Generation Failed—Generation of CLI commands for one or more devices in the job failed.

Approved—The job has been approved by a user with the appropriate permissions and is ready for deployment. This status is only valid if job approval is enabled in the Admin tab, meaning that jobs must be approved before they can be deployed.

Rejected—The job, including all its generated configurations, has been rejected.

Deploying—The configurations generated for the job are currently being deployed to the devices or to files in an output directory (depending on the option selected during job creation).

DeployedThe configurations for all the devices in the job have been deployed to the devices or to files.

Rollback in Progress—The configurations that were on the devices prior to deployment are currently being restored (to a specified directory).

Rollback Complete—The configurations that were on the devices prior to deployment have been restored.

Failed—Deployment to one or more devices in the job failed.

Device Status column

Displays the status of the device deployment in relation to the job status:

Pending—Configurations for the device are waiting to be generated/deployed.

In Progress—Configurations for the device are in the process of being generated/deployed.

Completed—Configurations for the device have been generated/deployed.

Rolling Back—In the process of rolling back to the previous configuration on the device.

Rolled Back—Rolled back to the previous configuration on the device.

Failed—Generation of configurations for the device or deployment to the device failed.

Device Status Time column

Displays the time at which the deployed device reached its current status.

VPN Connection Status column

This column is only relevant for spoke devices, because hubs might have multiple spoke connections. It shows the status of the VPN connection between the spoke and its assigned hub:

Connected—The device has a working VPN connection.

Disconnected—The VPN connection is broken for this device.

Primary Hub Failed—The primary hub for the VPN connection has failed. If a secondary hub was specified, it will be used as backup.

Secondary Hub Failed—No backup hub is available currently for the VPN connection.

Both Hubs Failed—Neither the primary nor the secondary hub is available, and so the VPN tunnel cannot function.

N/A—No information or not enough information is available to describe the VPN connection state.

Note The connection status for a hub will always be N/A because the hub potentially has many spoke connections. To see the connection status of a specific hub-spoke connection, look at the VPN Connection Status column for the relevant spoke.

Rolled Back (N/A)—Rollback was performed on the spoke, therefore the connection status might have changed.

Policy Change column

Indicates whether any policy changes were made on the device since the job was created and the configurations for the device were generated.

Refresh button

Click to refresh the display of the Deployment Report table to update the status of jobs and devices.


Generating the Audit Trail Report

You can generate an audit trail report to track past events that occurred in Router MC, such as inventory or policy changes, job and activity history, and so forth.

You create a query to specify exactly what information you want to see and from which time period. Router MC generates a report based on your specifications.

See Audit Trail Report—GUI Reference for a description of the elements in the Audit Trail page. Figure 1-1 shows an example audit trail report.

Procedure


Step 1 Select Reports > Audit Trail. The Audit Trail page appears.

Step 2 Select the check boxes next to the components for which you want information.

Step 3 Optional. Specify a start date and end date to indicate the time period for which you want information. If you do not specify dates, information from all dates will be retrieved.

Step 4 Optional. Select the check boxes next to the fields you want included in the audit trail report. Each selected field will be a column in the report. If you do not select fields, all fields will be included in the report.

Step 5 Optional. Specify the fields by which you want the report to be sorted.

Step 6 Click Apply. The report is generated and displayed (see Figure 1-1).


Note If you want to create a new query and generate a new report, click Audit Trail or click the Back button in your browser window.


Figure 1-1 Example audit trail report


Table 1-3 describes the elements displayed in the Audit Trail page that enable you to define a query to specify the information you want to see in the audit trail report.

Table 1-3 Audit Trail Report—GUI Reference 

GUI Element
Description

Components check boxes

Select at least one component to define the type of information that will be displayed in the audit trail report:

Activity—Displays events relating to activities, for example, creating, submitting or deleting activities. You can display events for specific activities or for all activities by selecting the required option in the Activity Name list box.

Job—Displays events relating to jobs, for example, creating, rejecting or deleting jobs.

Policy—Displays events relating to policy changes. The generated report differentiates between policy types. For example, IKE policies, tunnel policies, and so forth.

Object—Displays events relating to objects in the device inventory, including device groups and individual devices, for example, adding, moving or deleting devices or device groups.

Network Group—Displays events relating to network groups.

General—Displays any events that are not included in the above components, including administration events.

Login Name field

If you want to display a specific user's events, enter the relevant user name in this field. If this field is blank, all users' events will be displayed.

Activity Name list box

By default, information relating to all activities are displayed in the report. To display events from a specific activity only, select the activity from the list box.

Start Date field

Enter a date in the format mm/dd/yyyy, or click the ... button and select a date from the displayed calendar, to specify the start of the period for which you want to display information in the report. If the Start Date field is blank, the report will show all events (if the End Date field is also blank) or all events that occurred before the specified end date.

End Date field

Enter a date in the format mm/dd/yyyy, or click the ... button and select a date from the displayed calendar, to specify the end of the period for which you want to display information in the report. If the End Date field is blank, the report will show all events (if the Start Date field is also blank) or all events that occurred since the specified start date.

Fields check boxes

Select the information fields you want included in the report. Each selected field will comprise a column in the report.

Time—Displays the date and time at which the event occurred.

Login Name—Displays the name of the user that performed the event.

Component—Displays the component to which the event is related. Only the components you selected in the Components area will be displayed in the report.

Item—Where relevant, differentiates between different items belonging to a component. For example, IKE policies and tunnel policies are separate items belonging to the Policy component.

Activity—Displays the activity within which the event occurred.

Description—Displays a description of the event.

Sort By list boxes

Select the type of information by which you want the report to be sorted.

Apply button

Click to generate the report.


Generating the Hub-Spoke Assignment Report

The Hub-Spoke Assignment page displays a hierarchy (global, group and devices) of the hub devices in your device inventory. Spokes are not displayed. From this page, you can generate a report that shows the primary and failover assignment of spokes to selected hubs. You can also see the assignments of all spokes to all hubs, by selecting the Global object.


Note The generated report displays the hub-spoke assignments for the currently open activity. If there is no open activity, the report displays the assignments from activities that were approved. See Approving/Rejecting an Activity, page 1-13 for more information.


See Table 1-4 for a description of the elements in the Hub-Spoke Assignment page. Figure 1-2 shows an example Hub-Spoke Assignment report.

Procedure


Step 1 Select Reports > Hub-Spoke Assignment. The Hub-Spoke Assignment page appears.

Step 2 Select the check boxes next to the objects (hubs) for which you want to generate the report. You can also select Global if you want to see all hub-spoke assignments.

Step 3 If you don't want the report to include failover assignments, deselect the Show failover assignments check box.

Step 4 If the object(s) you selected is a device group, and you don't want the report to display the spokes that are contained in the device group, deselect the Show spokes in device groups check box.

Step 5 Click Generate Report. The report is generated and displayed (see example in Figure 1-2).

Figure 1-2 Example Hub-Spoke Assignment Report


Table 1-4 describes the elements displayed in the Hub-Spoke Assignment page that enable you to generate a report of the assignment of spokes to hubs.

Table 1-4 Hub-Spoke Assignment Report—GUI Reference 

GUI Element
Description

Check boxes

Select the check box to the left of any named object (global, group or hub) in the hierarchical list to select that object on which to generate a report. If you select a group, you will also select all of its devices and subgroups.

Note You can view the selected objects in a list by clicking the Selection tab.

+/- icons

Click the plus sign to expand, or click the minus sign to collapse, the selected level in the tree.

Generate Report

Click to generate a report for the selected object(s).

Show failover assignments check box

Deselect if you don't want the generated report to include the failover assignments. The report will display just the primary assignments of spokes to the selected hubs. By default the check box is selected, the first time you open this page in the current session.

Note Generating a report saves the user selection for this check box, within the current session.

Show spokes in device groups check box

If you selected object(s) on which to generate the report are device groups, and you don't want the report to display all the spokes contained in the device group(s), deselect this check box. By default the check box is selected, the first time you open this page in the current session.

Note Generating a report saves the user selection for this check box, within the current session.