FAQ about Cloud SWG Hosted Reporting

Products

• Cloud Secure Web Gateway - Cloud SWG

Issue/Introduction

 FAQ about Cloud SWG based hosted reporting functionality.

Environment

Cloud SWG.

Hosted reporting.

Resolution

1. Is there a limit on the duration the logs will be retained on Cloud SWG Hosted Reporting?

There is limit on the log retention duration. 

With Standard Reporting license the logs will be retained for 100 days. 

With Hosted Reporting license logs will be retained 365 days.

2. Is there a storage limit or size limit for hosted reporting on Cloud SWG?

There is no storage limit with regards to size of data for Cloud SWG Hosted Reporting. There is only limit to the duration for which the uploaded/hosted data can be retained.4

3. Does WSS upload Hosted Reporting based logs to SIEM again if the on-premises proxy is already uploading logs to SIEM?

WSS will not upload logs to SIEM which it received as a part of Hosted Reporting. WSS will only upload its transaction logs (traffic flowing via WSS) if it is configured to upload logs to SIEM.

4. What is the frequency of Cloud SWG Hosted Reporting service checks for log updates?

Cloud SWG checks your account every hour for new access logs that are transferred using secure copy (SCP) from the staging server. You can choose to upload logs to staging server once a day or every hour for more frequent data processing and current report viewing.

When sending logs directly to Cloud SWG from Edge SWG, you can choose the log upload frequency from Edge SWG GUI under Upload Client.