It seems like your browser didn't download the required fonts. Please revise your security settings and try again.
Barracuda Campus Barracuda Campus
Barracuda WAF-as-a-Service
Overview Documentation Training Certification Materials

Reports

  • Last updated on

Barracuda WAF-as-a-Service can create several reports, displaying data in both graphical and tabular formats to help you understand the traffic approaching your applications. You can create reports to run on a regular schedule or run reports on demand. 

Note that the graphs display up to ten results for each report. The tables show all of the available data.

To Schedule a Report

To schedule a report:

  1. On the Barracuda WAF-as-a-Service web interface, click REPORTS at the top of the page.

  2. On the Reports page, click Schedule and specify the information for the report:

    1. Report Type - Select the type of data for which you want to generate the report.

    2. Time Frame – Select the time range for the report. Options include Last Hour, Last 24 Hours, Last 7 Days, Last 14 Days and Last 30 Days.

    3. Applications – Select the application(s) for which the report needs to be generated.

    4. Frequency - Specify how often the report needs to be generated.

      1. Daily - Set the day and time for the report to be run. When you set Every to 3, the report runs automatically on every third (3rd) day at the specified time and covers the web activity that occurred for the selected report type.

      2. Weekly - Set the day and time for the report to be run every week. The report runs automatically at the specified day and time every week and covers the web activity that occurred during the past 7 days for the selected report type.

      3. Monthly - Set the date and time for the report to be run every month. The report runs automatically at the specified date, and time every month and covers the web activity that occurred during the past one month for the selected report type.

  3. Recipients - Specify the email address(es) of the recipient(s) to which the scheduled report(s) needs to be sent.

  4. Click Schedule.

To Generate a Report

  1. On the Reports page, do the following:

    1. Select the time range for the report.

    2. Select the type of data for the report from the Report Type drop-down list.

    3. Select the application(s) for which the report needs to be generated.

    4. Click Run Report. The report gets displayed in a new browser tab. 


To save the report as a PDF – Click Download. A PDF of the report downloads to your default download location.

Working with Scheduled Reports

Scheduled reports you created using the steps above are displayed in the Scheduled Reports table. 

Click the three dots 3dotsETS.png at the end of a row to take one or more actions on that report:

  • Run Now – Run the report and send the results to recipients immediately. 

  • Edit Schedule – Edit the report specifics, as described above.

  • Delete Schedule – Delete the report. 

Report Types

The Barracuda WAF-as-a-Service provides the following report types:

  • Top Attacks By Category report displays the number of attacks for the categories such as forceful browsing, XSS injections, etc., for the specified application(s) and time frame.

  • Top Attacking Clients report displays the number of attacks from the client(s) within the specified time frame.

  • Top Attacked URLs report displays the top-attacked URLs based on the requests received.

  • Top Attacking Countries report displays the number of attacks from different countries within the specified time frame.

  • Requests Over Time report displays the number of requests received by the selected applications within the specified time frame.

  • Bandwidth Over Time report displays the bandwidth usage by the selected applications within the specified time frame.

  • Bandwidth Summary report displays the bandwidth usage summary for all applications in the current user account within the specified time frame.

  • Executive Summary report provides a comprehensive overview of application security status, advanced security feature utilization, attack origins, bandwidth data, and attack classifications, demonstrating the value of WAF-as-a-Service in safeguarding company assets. The executive summary displays the data for all applications in the current user account. Users with the Executive role can generate the executive summary report for the last 14 days and 30 days. 

Admin role can also generate the executive summary report.

In the Executive Summary report, security features (DDoS, API and BOT) display the green check mark icon (success.png ) if the application is protected. If not, the orange warning icon (warning.png ) is displayed under the security feature name.

To protect applications from bot attacks, ensure that the following settings are enabled:

  • Referrer Spam - (Under BOT PROTECTION > Bot Attacks).

  • Client Evaluation - (Under BOT PROTECTION > Bot Detection > Client Challenges).

  • Bot Detection (including Insert hidden links in response, Insert disallowed URLs in robots.txt, and Insert delay in robots.txt) – (Under BOT PROTECTION > Bot Detection).

  • Advanced Bot Protection (supported only in premium license) – (Under BOT PROTECTION > Dashboard).

To protect applications from Distributed Denial-of-Service (DDoS) attacks, ensure that the DDOS component is added.

To secure your API endpoints, JSON profiles under APP PROFILES should have the following settings enabled:

  • Status

  • Block Attacks

  • Validate Key

If there is no JSON profile for root /*, API security is enabled by default.