User AuthenticationAuthorization and Auditing Site Studio Web Site Activity Reporting

8-62 Application Administrators Guide for Content Server

8.5.6 User AuthenticationAuthorization and Auditing

Content Tracker Reports provides an auditing feature that enables you to monitor unsuccessful attempts to access the system or permission-protected content items. Two reports are available that can help you analyze attempted security breaches that include failed user logons and unsuccessful attempts to access secure content items. This information is essential to safeguard system and content security as well as to maintain proper maintain audit trails and records. The available auditing reports include: ■ Authorization Failures by User This report provides access authorization denial information that includes user names and their IP addresses. Although these users have system access privileges, their roleaccount memberships may restrict them from accessing particular content items such as access to payroll content. ■ Login Failures This report provides loginauthentication failure information that includes user names and their IP addresses. The logged data does not distinguish between external, internal, and global users because, without a successful login, it is impossible to differentiate user types.

8.5.7 Site Studio Web Site Activity Reporting

If you are using Site Studio, then Content Tracker is automatically configured to track Site Studio activity. Content Tracker Reports uses the logged data to generate the pre-defined reports that summarize the Web site access results. This section covers the following topics: ■ Main Page Site Studio Report Links on page 8-62 ■ Site Studio Pre-Defined Reports on page 8-62

8.5.7.1 Main Page Site Studio Report Links

The Site Studio-specific Web access reports are included on the Content Tracker Report Generator main page if you have installed Site Studio.

8.5.7.2 Site Studio Pre-Defined Reports

The Site Studio pre-defined reports use the default Content Tracker Reports formatting and provide drill-down report capabilities. The top level reports for both are summary reports that use Site ID and Accesses as their general criteria. The drill-down reports provide the relevant statistics. Note: This guide assumes that users have a comprehensive working knowledge of or competent familiarity with the external reporting tool they are using to create custom reports. For this reason, this section is intentionally written to provide only very basic guidelines that can be applicable to most commercially available reporting products. Managing Content Tracker 8-63 ■ Web Site Content Accesses This report is ID based at the top level and in subsequent drill-down reports, the results are listed by Content ID and Relative URL.The information shows what URLs are being used to access a Web site. However, there are cases where many different URLs will actually display the same page. Therefore, the results of this report also provide the total number of hits on the nodes, regardless of how the user got there. ■ Web Site Accesses by URL This report provides summaries of the Web site relative URLs and the relevant activity sums.

8.5.8 Security Checks and Query Results