WSS Admin Guide

Monitoring DWP Port Usage

The features on the Port Monitor page work in conjunction with the Desktop Web Proxy (DWP). If DWP is not installed or configured, no Port Monitor data appears.

Note: To access the information about this tab, you must have View permission for Manage Ports.

Enabling DWP process capture

This process ensures that the Web Security Service captures DWP port data. The following procedure instructs you to enable the capture at the account level, but you can also configure at the user group level.

To enable DWP process tracking:

• Select the Accounts tab and click Edit.
• Select the DWP Configuration subtab.
• Under Connection, click Allow Process Port Update.
• Click Save.

Note: This configuration is also available on the System Configuration dialog of the DWP client, and on the Management Portal under the Groups' DWP Configuration tab. For more information, see the Desktop Web Proxy Configuration Guide.

Specifying criteria for port logs

If you have enabled the capture of DWP port data, you can access the Port Monitors page and view log details on DWP ports being monitored by the proxy. You can enter filters to create a specific view of port logs.

To specify criteria for the logs:

• Select the Monitors tab, then select Port Monitor.
  The Port Monitor page shows logs written by DWP. The collected data is based on the date.


Note: The entry wsdwpps.exe that appears under Process Name is DWP's process name.

• Select one or more dates from the last 90-day period:
  • Click to select a single date.
  • Shift-click or click and drag to select contiguous dates.
  • Ctrl-click to select non-contiguous dates. The current date is always selected as a default.
• Click the checkbox for the data point to capture.
• When filtering the data, select a criteria from the drop-down list.
  • Contains returns data containing the alphanumeric string in the text box. The string can be in the beginning, middle, or end of the entire value.
  • Does not contain returns data with values that do not contain the alphanumeric string in the text box. The string can be in the beginning, middle, or end of the entire value.
  • Equals returns data with values that exactly match the alphanumeric string in the text box.
  • Does not equal returns machine names whose values are not exactly the alphanumeric string in the text box.

  In the text box, type the alphanumeric string for the match criteria to use as a comparison.
  The following table describes the fields.

  Data Points	Description
  Windows Domain	The 'MyComputer' system properties.
  Machine Name	The machine name refers to the machines where the DWP client is installed.
  Process Name	The process name. To get the actual process name: Right-click the DWP icon on the system tray. Select List HTTP/HTTPS Processes. Type the process name in the text box. Note: wsdwpps.exe is the process name for the DWP client
  Port Details	The possible values for Port Details are: 80 identifies HTTP traffic that bypassed DWP. 443 identifies HTTPS traffic that bypassed DWP. Managed identifies the traffic that went through DWP.
  Windows Username	Criteria for the Windows user name.
  User Name	The proxy login that equates to the email address.

• Click Search.
  The log is refreshed with data based on your criteria. The log displays ten records per page by default. To display the next set of records, click More.
• To refresh the displayed log, click Search.
  The proxy updates the Management Portal every 15 minutes.

Generating CSV files

For instructions, see Generating CSVs From the Logs.