Applies To: FireCloud Internet Access, FireCloud Total Access
The FireCloud Usage Report includes dashboards that show you detailed information about FireCloud traffic and user connections. You can also log a user out of FireCloud on one or more devices. For more information, go to Log Out a FireCloud User.
To monitor FireCloud usage:
- Log in to WatchGuard Cloud.
- Go to Monitor > FireCloud. If you have a Service Provider account, you must select an account from Account Manager. Service Providers cannot see FireCloud reports from the Overview page.
The Usage Report page appears, with the Traffic tab selected. - To select the report date range, click
. - To view data for a specific end-user, select a user account from the User drop-down list. By default, the report shows data for all users.
- To see report data, select a tab:
- Security — Shows information about traffic blocked by FireCloud, as well as the top threats in each security area.
- Traffic — Shows information about traffic allowed by FireCloud.
- Users — Shows information about the users who connected to FireCloud and the devices they use.
Devices
The Devices tab shows you information about the users who connect to FireCloud and the devices they use.
From the Usage Report, you can see this information:
Devices
Shows how many devices are connected to FireCloud.
User
Identifies the user who is authenticated to FireCloud.
Device
Shows all devices that the user connected to FireCloud from.
FireCloud Connection
Shows the connection status for each device.
User Group
The groups that the user belongs to.
Access Rule
Shows all FireCloud rules that apply to this user, based on their user group.
Client Version
Shows the client connection manager version that runs on each device that the user connected to FireCloud from.
Operating System
Shows the operating system that runs on each device that the user connected to FireCloud from.
Filter the Users List
You can apply filters to the list of users so that it is easier to find specific users. You might do this if you want to see only users who have not connected to FireCloud recently or that have a specific version of the client installed.
To apply filters to the Users list:
- Click
.
The Filter window opens. - Select the filters you want to apply. You can select multiple filters.
- Click Apply Filters.
Each filter that you apply is shown at the top of the users list. To remove a filter, click the 
next to the filter name.
Log Out a FireCloud User
From the Usage Report, you can log out FireCloud users on specific devices. When you log a user out of FireCloud, the user must log in and connect to FireCloud again. You might do this if the group membership or password of a WatchGuard Cloud Directory user changes, to clear their authentication session and prompt them to connect to FireCloud with the new credentials or group membership.
Unlike when you remove a licensed FireCloud user, users that you log out still consume a FireCloud user license, even if you log them out of all devices.
To log out a FireCloud user, from WatchGuard Cloud:
- Select Monitor > FireCloud. If you have a Service Provider account, you must select an account from Account Manager.
- Select Usage Report.
- In the relevant user row, click
and select Logout Devices.
The Logout Devices dialog window opens. - Select the devices that you want to log out, then click Logout.
Security
From the Security tab, you can see information about blocked traffic and the top threats in each security area. You can click a tile to open a page with more detailed information.
You can see data for allowed connections in the Traffic tab.
Blocked Attacks
Shows a line graph of blocked attacks.
Click this tile to open a page that includes a list of all attacks and the number of hits for each attack. You can then select an attack to see more information.
Blocked Malware
Shows a line graph of blocked malware.
Click this tile to open a page that includes a list of all malware attacks and the number of hits for each attack. Select an attack to see more information.
Zero-Day Malware (APT)
Shows a summary of the threats identified by APT Blocker as zero-day malware.
Blocked URL Categories
Shows a donut chart with a breakdown of hits for each URL category blocked by WebBlocker.
Top Blocked Applications
Shows a list of the applications that users tried to connect to that were blocked by Application Control.
Top Blocked Users
Shows a list of the users with the most blocked connections.
Blocked Destinations
Shows a list of the most frequently visited destinations that FireCloud blocked.
Blocked Protocols
Shows a list of the top blocked protocols.
Geolocation
Shows a map of the destination locations of connections to countries blocked by Geolocation. The country color indicates the number of connections:
- Dark red — High
- Light red — Medium
- Grey — None
To open a page with additional details, such asthe number of hits for each country, click the tile. On the new page, you can also choose to display the map as a rotating globe.
Traffic
The Traffic tab shows information about allowed traffic through FireCloud. You can click any tile to go to a page with more information.
You can see security data for blocked connections in the Security tab.
Private Resources
Shows a list of the most frequently used private resources.
Top Application Categories
Shows a donut chart with a breakdown of how many hits there are for each application category.
Top Applications
Shows a list of the top applications that users connect to and use.
Top URL Categories
Shows a donut chart with a breakdown of how many hits there are for each URL category.
Top Domains
Shows a list of the most frequently visited domains.
Users
Shows a list of the FireCloud users with the most traffic.
Top Destinations
Shows a list of the most frequently visited destinations.
Top Protocols
Shows a list of the most frequently used protocols.
Geolocation
Shows a map of the destination locations of connections allowed by Geolocation. The country color indicates the number of connections:
- Dark blue — High
- Light blue — Medium
- Grey — None