Introduction
Overview
SecuReporter is a cloud-based analytics tool that is part of the Cloud CNM suite developed by Zyxel. It can aggregate logs from up to 40,000 supported Zyxel Security Appliances across distributed locations, giving network administrators a centralized view of security events and flow data, including the hostname, IP address, MAC address of the client devices.
Reports are generated using security intelligence techniques and automated data correlation with real-time traffic analytics, as opposed to merely relying on static and predefined rules. Insights relevant to a network’s security environment are available at a glance on an intuitive dashboard.
Supported Zyxel Devices and Firmware Versions
At the time of writing of this User’s Guide, SecuReporter supports the following Zyxel Devices:
supported models | supported version |
|---|---|
USG FLEX 100 | Version 4.50 or later |
USG FLEX 200 | |
USG FLEX 500 | |
USG FLEX 100W | Version 4.60 or later |
USG FLEX 700 | |
USG FLEX 100AX | Version 5.37 or later |
USG FLEX 100H(P) | Version 1.10 or later |
USG FLEX 200H(P) | |
USG FLEX 500H | |
USG FLEX 700H | |
USG FLEX 50H(P) | Version 1.30 or later |
USG LITE 60AX (Traffic Logs only) | Version 2.20 or later |
SecuReporter supports log sending from the Zyxel Device managed through NCC (Nebula Control Center). Log sending is disabled by default on the Zyxel Device. To view logs in SecuReporter, you must enable logs to be sent to SecuReporter in the Web Configurator of the Zyxel Device or NCC. However, the traffic logs of the ZyWALL ATP series and USG FLEX series on-cloud models are sent to NCC and are not available in SecuReporter.Screens and widgets vary depending on the Zyxel Devices that you use. This table summarizes some of the features that are only available for the USG FLEX H series, ZyWALL ATP series, ZyWALL USG FLEX series, and ZyWALL USG FLEX 50(AX) series.
SUPPORTED features | USG FLEX H Series | USG FLEX Series | USG FLEX 50(AX) SERIES | ATP Series | USG LITE 60AX Series |
|---|---|---|---|---|---|
Sandboxing | Yes | Yes (with Gold Security Pack) | No | Yes | No |
Reputation Filter | Yes | Yes (with Gold Security Pack) | No | Yes | Yes |
Web Filtering | Yes | Yes | Yes | Yes | No |
Anti-Malware | Yes | Yes | No | Yes | No |
IPS | Yes | Yes | No | Yes | No |
Application Patrol | Yes | Yes | No | Yes | No |
Device Insight | Yes | Yes | Yes | Yes | No |
Traffic Usage | Yes | Yes | Yes | Yes | Yes |
SecuReporter Management Privileges
A Zyxel Device owner can register a Zyxel Device at https://account.zyxel.com. Only an owner can add Zyxel Devices to an organization. However, an owner can assign other people to manage Zyxel Devices.
This table summarizes SecuReporter privileges at each level of the model:
role types | sign in at Zyxel account? | Privileges |
|---|---|---|
Agent (Owner) | Yes | • Can add/delete Zyxel Devices to/from an organization • Can add/edit organizations • Can add/edit admin/user accounts • Can configure alert notifications • Can configure dashboard widgets • Can configure analyses and reports • Can create request for transfer of analytics and logs • Can import analytics and logs • Can create log download request and download archived logs |
Admin | Yes | • Can add/edit organizations • Can configure alert notifications • Can configure dashboard widgets • Can configure analyses and reports • Can import analytics and logs • Can download archived logs |
User | Yes | • Can configure dashboard widgets • Can view analyses and report |
License Options
You can use SecuReporter with a free 30-day Trial license or buy a 1-year device license. You will receive a renewal notification before either expires. In addition, for the SecuReporter license, you will have an extra 15 day grace period to renew.
SecuReporter will automatically delete logs when the grace period has expired.Cloud Mode
In cloud mode, you can manage and monitor the Zyxel Device through the Nebula Control Center (NCC). This means you can manage devices remotely without the need of connecting to each device directly. It offers many features to better manage and monitor not just the Zyxel Device, but your network as a whole, including supported access points, switches and gateways. Your network can also be managed through your smartphone using the Nebula Mobile app.
NCC allows different levels of management. You can configure each device on its own or configure a set of devices together as a site. You can also monitor groups of sites called organizations, as shown below.
Organization | |||
Site A | Site B | ||
Device A-1 | Device A-2 | Device B-1 | Device B-2 |
Some features are not supported for certain models in cloud mode. Please go to NCC to view or configure them.
features | ATP / USG FLEX / USG FLEX 50 (AX) / VPN series | usg flex h sERIES |
|---|---|---|
Add/delete Zyxel Devices to/from an organization | No | No |
Add/edit admin/user accounts | No | No |
Configure alert notifications | No | No |
View traffic log | Yes | Yes |
View security event log | Yes | Yes |
View User/Device/DHCP events | Yes | Yes |
View CPU/memory/session usage | No | Yes |
Event logs are available by default. However, traffic logs will not be generated unless you enable them. To view traffic logs in SecuReporter, you must enable traffic log sending in the Web Configurator of the Zyxel Device or through NCC.