In the NetScaler SWG appliance, all the user records and subsequent records are logged. When you integrate NetScaler Management and Analytics System (MAS) with NetScaler SWG appliance, the logged user activity and the subsequent records in the appliance are exported to NetScaler MAS using logstream.
NetScaler MAS collates and presents information on the activities of users, such as, websites visited and the bandwidth spent. It also reports bandwidth use and detected threats, such as malware and phishing sites. You can use these key metrics to monitor your network and take corrective actions with the NetScaler SWG appliance. For more information, see NetScaler Secure Web Gateway Analytics.
To integrate NetScaler SWG appliance with NetScaler MAS:
In the NetScaler SWG appliance, while configuring the Secure Web Gateway, enable Analytics and provide the details of the NetScaler MAS instance that you want to use for analytics.
In NetScaler MAS, add the NetScaler SWG appliance as an instance to NetScaler MAS. For more information see Add Instances to NetScaler MAS.