Skip to content Skip to main navigation Skip to footer
Wavecrest Knowledge Base

Tag: Cyfin

Microsoft 365 Reporting Prerequisites

Category: Data Manager, Log File Compatibility, Reporting

To use Cyfin 365 reporting you need to enable Audit Log Search and register an application in Azure AD.

Once this application is registered note the Application (client) ID and the Directory (tenant) ID. Then configure the authentication in the Certificates & Secrets section from the link provided above.

Configure Cyfin

  1. Navigate to ‘Data Management – Log Data Source – Setup’
  2. Select ‘Create New’ from the configuration dropdown and click ‘Next’
  3. Click Office365 from the listed options
  4. Fill in the appropriate fields with information gathered from the prerequisites. See below image.
  5. Once completed continue to the next screen and name your configuration then click next once more to save.
Microsoft 365 Reporting
Microsoft 365 Cyfin Configuration

v9.5.0 Release Notes for Cyfin

Category: Release Notes

Enhancements

  • Log File Configurations
    • Added SonicWall VPN firewall parser to existing SonicWall VPN configuration. This allows configuration to track network activity for active VPN sessions.
  • Report Templates
    • Added Bytes to VPN Heatmap metric options.
    • Updated Hits VPN Heatmap metric to use firewall connectivity information instead of just sessions logons and logoffs.

Corrections

  • Data Management – Import
    • Added catch for handling incorrect URL formats that was causing import to fail.
  • Setup – Restore
    • Fixed inability to properly upload Restore Point.
  • Log File Text Parser
    • Corrected byte storage from int to long to prevent parsing error when total bytes is greater than max int value causing record to be thrown out.

v9.2.8.p Release Notes for Cyfin

Category: Administration

Enhancements

  • Reporting
    • Updated email client to allow for single report email to multiple recipients instead of each recipients getting their own copy of the report.
  • Logon Accounts
    • Updated email client to explicitly identify new account email notifications as text/plain.
  • JAVA Environment
    • JRE upgraded to newer version.

Corrections

  • Popups
    • Corrected text overflow issue in popups which caused the overflow text to be hidden.

v9.4.9.a Release Notes for Cyfin

Category: Administration

Enhancements

  • Data Management
    • Log Data Source – Wizard
      • Add ability to cancel task for auto inspecting source log data for matching to known devices log formats.
  • Help
    • Support – Log Configurations
      • Added new feature to allow for inspection of syslog data and submission to Wavecrest for analysis. A link to this new page is given during the log configuration wizard when the syslog data is not matched to any known device log format.

Corrections

  • Reporting
    • Dashboard
      • The metric for “Visits” was missing from the selection in all the charts. Additionally, the Hit metric was displaying “Visits” legend label. These are now corrected.

v9.4.9 Release Notes for Cyfin

Category: Administration

Enhancements

  • Reporting
    • Dashboard -Custom
      • Added Option to select Data Type (Web, VPN, Palo Alto)
      • Added additional group by and subgroup options
        • IP
        • Content-Type
        • Result Code
    • Data Management
      • Log Data Source – Delete
        • Added new option for 2 day storage limit. New install enable auto delete and 2 day limit by default.
    • Templates
      • Added Heatmap section type

v9.4.8 Release Notes for Cyfin

Category: Administration, Release Notes

Enhancements

  • Log File Configurations
    • Added Palo Alto VPN configuration
  • Report Templates
    • Added device OS, device Name, and VPN Server to VPN report template. Device OS and Device Name only available in Palo Alto VPN Configuration currently.

Correction

  • Reporting
    • Corrected successive interactive report drilldown causing browser error.

V9.4.5 Release Notes for Cyfin

Category: Administration

Enhancements

  • Network Segments
    • Assign IP address blocks based on reasons such as remote VPN users, public WiFi, corporate WiFi, different departments or physical location in the facility.
    • Easily define a unique segment definition by single hostname, IP address range or by IP subnet. 
    • Report on specific segments through dashboard charts or actual reports.
    • Customize charts and reports to include or exclude traffic from segmented IP addresses. 
    • Create a specific row-level filter or run a report with a global-level filter that will affect all the data.

Corrects

  • Dashboard – Palo Alto Traffic
    • Corrected chart configuration selection not rendering properly.

V9.4.3 Release Notes for Cyfin

Category: Release Notes

Enhancements

  • Real-Time Monitor
    • Cyfin customers that have syslog data configuration will now have a new feature to able to watch their syslog traffic in real-time. This new feature is located under Real-Time Monitors – Web.Users will have to option to filter the data they are looking at by:Groups and IDs
      • Categories
      • Blocked Requests only
      • Log Data source (if more than 1 syslog configured)
  • User Management – Import Users
    • Added new Metric Server Sync option in the Manage screen to allow for usernames to be imported from the metric server to the product. This feature is enabled by default and will place usernames not currently in the product or being imported from AD or text file into the product in the group “Ungrouped IDs”. 
    • Updated the behavior of “Inside the Product” configuration to now allow users that already exist in the product under the group “Ungrouped IDs” to be moved to their imported Group.  Users that are in other groups will not be moved. 
  • Policy Reports
    • Groups and IDs
    • Moved the Groups and IDs policy report from System Status – Policy Reports to User Management – View in the product menu.
  • Custom Report Header
    • Upgraded the custom report header feature to not require a file to be selected, but instead provide an in-browser HTML editor for users to customize. A toggle button has also been added to enabled and disable this feature. Existing custom report header configuration will be retained in displayed in new HTML editor. The new screen is located in the menu under Settings – Reports – Custom Header.
  • Product Menu
    • Updated product to only display Reports – Dashboard – Palo Alto Traffic menu option if there is at least 1 Palo Alto data configuration.
  • Secure Interface
    • Created ability to generate Certificate Signature Request (CSR) to facilitate certificate generation for secure interface. This new feature is location in Settings – Secure Interface screen.
  • Product Menu
    • Removed Sample Reports from product menu.
  • User Interface Libraries
    • Updated jQuery library version to remove security vulnerabilities.
  • License
    • Updated license notification message to include number of days left in both the Dashboard screen and the Settings – License screen.

Corrections

  • Reports
    • Corrected issue preventing Cloud Services reports from running when the product was configured with list version 10.
  • Memory Configuration
    • Fixed upgrade issue that reset the product memory to minimum setting until the VM was rebooted. The memory setting will not be affected during this and future upgrades.
  • Log File Configurations
    • Corrected the parser for Fortigate 6.0 to correctly allow it to be imported.

Benefits of Upgrading to Cyfin VM

Category: Administration

Wavecrest is excited to share more information about upgrading your Cyfin. The latest Cyfin VM will open up your Web reporting capabilities to be easier and much more useful than ever before!

We have expanded Cyfin’s machine-learning algorithms, substantially improving the visit filter and time online calculation and providing faster data retrieval, bringing you superior data insights that are more actionable than ever before.

The expansion of the reporting features also includes expanded fields to report on! To us manager ready means easy and understandable for everyone. We have added a new tagging field provides a friendly name for sites visited. Managers do not need to dig through firewall data to get to the information they need, making the report much easier for every manager, admin, HR, and others to interpret.

Our new Custom Reporting feature has also become one of our new faves. Every business is different, and that means they want different information, different formats, and at different times. Cyfin’s Custom Reports allows you more control by giving you easy drag-and-drop tools to build tailored reports for different departments, run these reports ad hoc, allow managers access to their data while using your customized templates, and more. All to provide you flexibility for reports that specifically fit your company’s unique needs.

We have also focused on becoming even more user-friendly, low maintenance, and sensitive to IT time constraints. Cyfin is now much more scalable, with easier processes to expand the metric server cluster and distribute the processing, as well as making it easier to manage system resources for both Cyfin and metric server/s.

We are not stopping there. With the new Cyfin environment the sky’s the limit. It has opened up our ability to work on what you need almost to the point of customizing it for you!

A peek of just a few things we have up our sleeves:

  • Geolocation report that provides the country of the websites your employees’ visited
  • Improved search term reports
  • Improved user agent report

Based on the advances in the technology and the increase and speed of features, we recommend you upgrade to the latest version of Cyfin. Even though we feel the upgrade is relatively straightforward please know that Support will spend as much or as little time with you as you deem necessary! We are here for you, so please ask any questions or request any other information!

Upgrading from Cyfin v9.2.8 to v9.4.x

Upgrading from Cyfin v9.2.8 to v9.5.x

Category: Administration

Customers currently running Cyfin Version 9.2.8 may now upgrade to Cyfin Version 9.5.x. This new version consists of two components, Cyfin and a metric server database, that run in VM environments–VMware and Hyper-V. Customers have a choice of two upgrade options.

Option 1: Upgrading an Existing Cyfin Install

  1. Contact support to upgrade your existing Cyfin install to the latest version, currently v9.5.x.
  2. Install the metric server on either a VMware or Hyper-V platform.

Option 2: Installing a New Cyfin VM Version

  1. Install both Cyfin v9.5.x and the metric server on either a VMware or Hyper-V platform.
  2. Configure Cyfin to read your existing log files before log data can be imported.
  3. Use our Sync tool to transfer your core configuration settings to the new version of Cyfin.

Note:  Both options will require a reimport of your log data.

When you are ready to upgrade, Technical Support will be on hand to get you up and running. If you have any questions, please contact Technical Support at (321) 953-5351, Ext. 4 or support@wavecrest.net.

Benefits of Upgrading to Cyfin VM