In Citrix SWG appliance, all the user records and subsequent records are logged. When you integrate Citrix Application Delivery Management (ADM) with Citrix SWG appliance, the logged user activity and the subsequent records in the appliance are exported to Citrix ADM using logstream.
Citrix ADM collates and presents information on the activities of users, such as, websites visited and the bandwidth spent. It also reports bandwidth use and detected threats, such as malware and phishing sites. You can use these key metrics to monitor your network and take corrective actions with the Citrix SWG appliance. For more information, see Citrix Secure Web Gateway Analytics.
To integrate Citrix SWG appliance with Citrix ADM:
In the Citrix SWG appliance, while configuring the Secure Web Gateway, enable Analytics and provide the details of the Citrix ADM instance that you want to use for analytics.
In Citrix ADM, add the Citrix SWG appliance as an instance to Citrix ADM. For more information see Add new Instances to Citrix ADM.