Skip to content

Page permalink

Always use the following permalink when referencing this page. It will remain unchanged in future help versions.

https://docs.sophos.com/central/customer/help/en-us/index.html?contextId=firewall-report-SPA

Security Posture Assessment Report

You can create and configure an executive report that captures the key activity metrics for a customer's environment, similar to the Security Audit Report (SAR) in SFOS. See Sophos Firewall: Report scheduling.

You can do as follows:

  • Export an SPA report containing multiple reports in the following formats: PDF (maximum of 10,000 records), CSV (maximum of 100,000 records), and HTML (maximum of 10,000 records).
  • Select components to include in the SPA report.
  • Schedule daily, weekly, or monthly SPA reports.
  • Try SPA reports for 7 days without an advanced Central Firewall Reporting (CFR) license.
  • Use existing templates in SPA reports.

Configure an SPA report

To configure an SPA report for firewalls or firewall groups, do as follows:

  1. Go to My Products > Firewall Management > Report Generator.

  2. Select your firewalls from the drop-down list.

    You can select a maximum of 50 firewalls.

  3. Under Report templates, select Security posture assessment.

    This hides the Filter Queries section, the Generate button, and the chart and table area.

    The Components drop-down list appears. The Include device inventory option appears.

  4. Select up to 10 components to include in the SPA report. You can drag the components on the right-hand side to re-order them.

    Note

    SPA reports include Sankey charts and stacked bar charts.

  5. (Optional) Click Include device inventory to include a list of firewalls and their statistics in the SPA report. The maximum number of firewalls included in the SPA report is 2000.

    The approximate time taken to generate the SPA report is as follows:

    • For 500 firewalls: 1.5 to 2 minutes
    • For 1000 firewalls: 4 to 5 minutes
    • For 2000 firewalls: 9 to 10 minutes

  6. Click Schedule or Save Template. See Report Generator.

    Note

    If you're scheduling a report and you don't have an advanced CFR license, the options are Daily and Weekly.

If you click Schedule, the SPA report will be available under Scheduled Exports.

If you click Save Template, the SPA report template will be available under Saved Templates.

Quick export

To export your SPA report for immediate download, do as follows:

  1. Go to My Products > Firewall Management > Report Generator.
  2. Select your firewalls from the drop-down list.

  3. Under Report templates, select Security posture assessment.

    This hides the Filter Queries section, the Generate button, and the chart and table area.

    The Components drop-down list appears. The Include device inventory option appears.

  4. Select up to 10 components to include in the SPA report. You can drag the components on the right-hand side to re-order them.

    Note

    SPA reports include Sankey charts and stacked bar charts.

  5. Select the Time frame for the data you want to include.

    Note

    If you're scheduling a report and you don't have an advanced CFR license, you can select a time frame up to and including seven days.

  6. Select the format in which to export the report. The options are as follows: PDF, CSV, and HTML.

    This triggers a temporary one-off schedule that creates a quick export available for immediate download. You can find the report under Scheduled Exports.