About Dashboards

Dashboards provide real-time visibility into your organization’s internet traffic. Multiple dashboards provide different views, so you can track internet usage and quickly take action when you see anomalous trends or security threats. Each dashboard contains widgets that present data in interactive charts, so you can instantly jump from a chart to individual transactions.

You can view and edit dashboards, depending on your role permission and scope. A dashboard or widget displays the message View Restricted when you do not have the appropriate permissions to view its content.

When you customize a dashboard, the changes are accessible only to you.

New widgets won't appear on customized dashboards. To view any newly-released widgets, you must reset your customized dashboards.

The Zscaler service provides predefined dashboards. The portal displays the dashboards and widgets according to your organization’s subscriptions. For example, if your organization has a subscription to the web security service only, you can see dashboards and widgets that report on web traffic, but not those that report on mobile traffic. You can customize the predefined dashboards if you have the appropriate permissions.

By default, user-related widgets include locations and users. You can exclude locations by creating new or editing existing widgets and using the Exclude Location filter. This filter applies to all user-related widgets except for widgets in the default Security dashboard. To learn more, see How do I exclude locations in user-related reports?

When you log out, the service remembers the last dashboard you viewed and displays it when you log back in.

Zscaler recommends that you set your dashboards to automatically reset every 15 minutes. This prevents your session from timing out and also keeps the information in your window up to date. Go to Administration > Settings > My Profile to enable this. To learn more about customizing your settings, see How do I customize my admin account settings?

The following sections describe the predefined dashboards.

Predefined Dashboards

This dashboard provides a high-level view of your organization's Web traffic.
See image.

  • The Cloud Application Classes widget displays the volume of traffic for each cloud application class.
  • The Top URL Categories widget displays the number of transactions for the top URL categories.
  • The Top Users widget lists users by bandwidth usage.
  • The Social Networking Applications widget displays the number of transactions for the top applications in the Social Networking application class.
  • The Streaming Media Applications widget displays the bandwidth usage for the top streaming media and file share sites that were accessed by your users.
  • The Top Advanced Threats widget lists the number of transactions that were blocked due to threats in the Advanced Threats category.

The service classifies threats into two classes: Viruses and Spyware, and Advanced Threats. This dashboard provides data about the various threats that were blocked by the service in each class.
See image.

  • The Viruses & Spyware widget, the Advanced Threats widget, and the Sandbox widget provide an overview of the types of threats that were blocked over the selected time period. 
  • The Top Users/Locations for Viruses & Spyware widget, the Top Users/Locations for Advanced Threats, and the Top Users/Locations for Sandbox flags users and locations whose transactions were blocked due to each type of threat.
  • The Sandbox Patient 0 Events widget lists patient 0 events that occurred in your organization. To learn more, see About the Sandbox Patient 0 Event Widget.

If you have the Advanced Sandbox subscription and you don't see the Sandbox Patient 0 Events widget, reset the Security dashboard.

This dashboard provides visibility into the browsing activity of your organization.
See image.

  • The Web Browsing Trend widget provides the browsing activity trend of your users for each URL class in the selected time period.
  • The Web Browsing Summary widget displays the number of transactions in the selected time period for each URL class.
  • The Top URL Categories widget displays the number of transactions for each URL category.
  • The Top Users widget lists the users with the most browsing activity, from the user with the most number of transactions to the least.
  • The Top Blocked URL Categories widget displays the number of attempts to access URL categories that were blocked due to the configured URL policies.
  • The Top Blocked Users widget lists the users with the most blocked transactions.

This dashboard provides visibility into the cloud applications used by your organization.
See image.

  • The Cloud Applications Trend widget gives you information on the cloud applications that were used over the selected time period. Zscaler has partnered with Skyhigh and Microsoft Cloud App Security (MCAS) to provide a risk profile for each application. To see the risk scores provided by Skyhigh, MCAS, as well as the aggregated score provided by Zscaler, point to a cloud app in the widget. Hover over Skyhigh or Microsoft Cloud App Security to expand and view the data. You can also download the data as a CSV file for further analysis. This information is available on the dashboard and as a CSV file only. It is not available in logs. If a cell is blank, the Zscaler service has been unable to retrieve data for it.
  • The Social Networking Applications widget displays the number of transactions for the top applications in the Social Networking application class.
  • The Social Networking Users widget lists the top users of these applications by the number of transactions.
  • The Streaming Applications widget displays the bandwidth used by the top applications in this class.
  • The Streaming Users widget lists the top users of these applications by bandwidth usage.

This dashboard provides visibility into the traffic from your organization's mobile devices.
See image.

  • The Mobile Device Platform Traffic Trend widget displays the traffic trend for each mobile device type.
  • The Mobile App Category Traffic Pattern widget displays the activity in each mobile application category.
  • The Mobile App Traffic Pattern widget displays the activity for each mobile app.
  • The Mobile App Category Summary widget displays the number of transactions for each mobile application category.
  • The Top Mobile Users widget displays the top users of mobile devices.
  • The Top Blocked Mobile Users lists the users who may have violated policies.

This dashboard provides information about the email traffic of your organization.
See image.

This dashboard is only visible to users who are admins.

  • The Inbound Email Trends widget displays a trend line recording the how many inbound emails the policies are being applied to.
  • The Outbound Email Trends widget displays a trend line recording the how many outbound emails the policies are being applied to.
  • The Top Senders widget displays a list of the users who send the most email and how many emails they sent.
  • The Inbound Email Type displays the number of inbound emails that fall into a policy type.
  • The Outbound Email Type displays the number of outbound emails that fall into a policy type.
  • The Top Recipients widget displays a list of the users who receive the most email and how many emails they received.

This dashboard provides data about the DNS traffic of your organization.
See image.

  • The Top DNS Tunnels & Network Apps widget displays what type of tunnels and network applications were most commonly detected.
  • The DNS Tunnel & Network App Categories widget displays what tunneling and network application categories transactions fell into.
  • The Top IP Domain Categories widget displays the number of transactions for each URL category.
  • The Top Blocked IP Domain Categories widget displays the number of attempts to access URL categories that were blocked due to the configured URL policies.
  • The Top Users widget lists the users with the most browsing activity, from the user with the most number of transactions to the least.
  • The Top Blocked Rules Hit widget lists the DNS policy rules that were enforced when traffic was blocked.
  • The Top Blocked Users widget lists the users with the most blocked transactions due to the DNS policy.

This dashboard provides data about the firewall traffic of your organization.
See image.

  • The Top Applications widget displays the network applications that were used.
    • By default, the widget does not display internal apps and apps that have not been identified by the Zscaler firewall.
    • To add the excluded apps, edit the widget. Then edit the Network Application filter and select the apps from the list.
  • The Top Network Services widget displays the network services that were used.
  • The Top Users widget lists the users with the most browsing activity, from the user with the most number of transactions to the least.
  • The Top Blocked Rules Hit widget lists the firewall policy rules that were enforced when traffic was blocked.
  • The Top Blocked Users widget lists the users with the most blocked transactions due to the firewall policy.

This dashboard provides real-time visibility into your organization's bandwidth usage.
See image.

  • The Total Bandwidth Consumption widget displays your organization's bandwidth usage (in bits per second) in a trend chart. By default, the dashboard displays bandwidth usage for the past 24 hours. You can choose a different time frame from the menu. When you choose 30 days as the time frame, the widget displays the 95th percentile trend line, which is based on the 95th percentile of inbound or outbound traffic; whichever is highest. From the 30-day view, you can drill down to a 5-minute view right on the chart. The Total Bandwidth Consumption widget displays the 95th percentile trend line only 30 days after the Bandwidth Control policy has been enabled.
  • The Top Throttled Locations widget displays locations with the most throttled transactions and their corresponding throttled bandwidth.
  • The Top Bandwidth Classes widget displays the top five bandwidth classes by bandwidth usage.
  • The Top Bandwidth Locations widget displays the top locations with the highest bandwidth.
  • The Bandwidth Control Rules widget displays the rules that used the maximum bandwidth.

This dashboard provides real-time visibility into your organizations’ Office 365 traffic.
See image.

  • The Total Office Traffic Volume widget displays the total volume of traffic for each Office 365 application.
  • The Office 365 App Traffic Volume widget displays the bandwidth usage for the top Office 365 applications that were accessed by your users.
  • The Top Office 365 Locations widget displays the top locations with the highest bandwidth.
  • The Top Office 365 Users widget lists the top users of these applications by bandwidth usage.
  • The Total Traffic Volume widget displays the overall bandwidth usage for all applications.
  1. View another dashboard. Hover over the Dashboard tab to list the dashboards, then click the dashboard you want to view.
  2. Change the title of the dashboard. A dashboard title can contain up to 50 characters. Click the title of the dashboard and enter a new name. Click anywhere outside of the title field to save the change.
  3. Choose a different time frame from the menu. By default, dashboards display data for the last 24 hours. The time frame is retained when you navigate to other dashboards. The Bandwidth Control dashboard is the only dashboard that offers a 30-day time frame.
  4. Hide or show all notes. See How do I add notes to the Dashboard and Interactive Reports?
  5. Reset the dashboard to its original settings and view any newly-released widgets. You lose any changes you made, including new widgets that you created.
  6. Add a note to the dashboard. See How do I add notes to the Dashboard and Interactive Reports?
  7. Create a new widget. A dashboard can contain up to 12 widgets. See What is a widget?
  8. View, edit, delete, resize, and move the widgets that the dashboard contains. See What is a widget?
  9. Edit or delete a note. See How do I add notes to the Dashboard and Interactive Reports?
  10. Roll over a chart to obtain more information about an item, click it and select one of the following: 
    • View Logs to see its associated logs.
      The View Logs option is not available for charts that display secure browsing class, data or status, because they only use samples as their data units. See Viewing Web Logs, for an example.
    • Analyze Chart to view the chart in the Analytics tab where you can interactively drill down to the logs. See Analyzing Traffic Using Insights.
    • A widget displays the top five items and groups everything else under Other. Click Show Details to see the items that were grouped under OtherSee image.
  11. View the Weblog time, which appears at the bottom of every window. The Nanolog servers collect the logs of all users worldwide, and then consolidates and correlates them. The Weblog time displays the date and time of the logs that are being processed by the Nanolog servers.

Screenshot of the Mobile Applications dashboard and the different widgets

A description of the fields available in the Cloud Application Trend CSV file.

Zscaler

  • Cloud App Name: The name of the cloud app that was visited.
  • Cloud App Category: Which cloud app category the app belongs to.
  • Usage: The total traffic proxied through Zscaler for this app measured in bytes.
  • zs Threat Index: The threat level assigned by Zscaler based on the history and analysis of the app. Scores range from 0 - 100 and the lower the score, the safer Zscaler considers the app.
  • Alexa Rank: A popularity rating retrieved from partner site alexa.com/siteinfo. A site with an Alexa Rank of 1 has the highest number of combined page views and visitors over the last three months.

Skyhigh

  • V1 Vendor Name: Skyhigh, the name of the vendor who provided the information. 
  • V1 Risk Level: The risk level assigned by Skyhigh (Low Risk, Medium, or High Risk).
  • V1 Risk Score: The risk score assigned by Skyhigh. Scores range from 1-9 and the lower the score, the safer Skyhigh considers the app.  
  • V1 Breach: The length of time that has elapsed since the last data breach occurred for the app.
  • V1 Data Encryption: A Boolean representing whether the app provides data encryption.
  • V1 Two Factor Authentication: A Boolean representing whether the app supports two-factor authentication.    
  • V1 Service Hosted In: Which country the app is hosted in.    
  • V1 Business HQ: The country where the app makers’ headquarters are located.    
  • V1 Compliance Certifications: A list of the app’s compliance certifications. For example, ["Safe harbor","Trustee","BBB"].
  • V1 Transit Encryption: The encryption the app uses for data in transit. For example, ["TLS 1.0".].

MCAS

  • V4 Vendor Name: Microsoft, the name of the vendor who provided the information.
  • V4 Risk Level: The risk level assigned by MCAS (Low Risk, Medium, or High Risk).
  • V4 Compliance Certifications: A list of the compliance certifications used by the app. For example, ["Privacy Shield", "ISO 27001"].
  • V4 Data at Rest Encryption: Lists the type of encryption given to “data at rest”. For example, AES.
  • V4 Admin Audit Trail: A Boolean representing whether the app provides an admin audit trail.
  • V4 User Audit Trail: A Boolean representing whether the app provides a user audit trail.
  • V4 Data Audit Trail: A Boolean representing whether the app provides a data audit trail. A data audit trail records transactions every time a data record is altered within the application. 
  • V4 HTTP security headers: A list of the HTTP security headers that the app uses.
  • V4 Multi-factor authentication: A Boolean representing whether the app supports multi-factor authentication. For example, ["x_frame_options"].    
  • V4 Business HQ: The country where the app maker’s headquarters are located.    
  • V4 Risk Score: The risk score assigned by MCAS. Scores range from 0-10 and the higher the score, the safer MCAS considers the app.  

 

Screenshot of Other slice from Zscaler widget pie chart 

Screenshot of the Cloud Applications dashboard

Screenshot of the DNS Overview dashboard

Screenshot of the Bandwidth Control dashboard

Screenshot of the Email Overview dashboard 

Screenshot of the Firewall Overview dashboard 

Screenshot of the Office 365 dashboard 

Screenshot of the Web Browsing dashboard

Screenshot of the Web Overview dashboard 

Screenshot of the Security dashboard

Screenshot of the Mobile dashboard