If you are using Microsoft TMG you are most likely looking for TMG replacement. You still have time, but there is a bad feeling present. There are several alternatives to MS TMG and Sophos UTM is one that is mentioned the most. Mostly to a great price, feature set that matches and even exceeds TMG. TMG admins testing alternatives often find a product that they like but soon discover that it lacks one of the features they had with TMG. Reverse proxy being one such feature. Most UTM (Unified Threat Management) devices have reporting included and so does TMG.
But what happens when you want to dig deeper into your data? TMG is great example, you have all data, all logs, but to see information that is not included in reports, you have to get your hands dirty…. or use a tool that is able to extract information and present it to you in a human readable view. The worst when your boss needs information urgently and you have to tell him that yes, you can give him information, but he will have to wait an hour or two.
Fastvue is a company that saw how crippled was TMG reporting and said hey, let’s do something completely different. A result was a masterpiece, product no one had, no one even foreseen to be possible. Web-based console with real-time data presented in a beautiful and informative fashion. It was appropriate for a boss or a nerd looking for every information possible. You can read my review of TMG Reporter here.
I am happy to say that they did it again, this time, they released Sophos Reporter.
It has the same feature set you were used from TMG Reporter. Because it can integrate with Active Directory you can run reports per users or departments. You can schedule reports and send them via email to the person in HR or similar. Reports are really simple to understand as the whole Fastvue reporter is created with usability in mind.
Another benefit is unproductive reporting. Sophos Reporter has it’s own database of appropriate websites. When run, it will show you which websites it thinks are unproductive. Where this comes handy is when you are setting up rules for sites that are not allowed. You can easily miss one or two. Unproductive sites report can catch those sites easily.
My favorite feature is Malware altering. Whenever a virus is detected, you can schedule alerts which will notify whenever a virus is accessed. You can extend altering with very large downloads or unacceptable sites being accessed.
Because this is Sophos reporter you can add as many devices as you have as a source to collate information. You will have unified dashboard with easy to use reporting. You will be able to receive awesome reports for all devices.
You can also use Sophos Reporter to monitor what sites are being blocked, who is the most unproductive user, malware sites accessed, application that is consuming the most bandwidth, usage by departments and many additional information.
You can find more information on Sophos Reporter website