Which of the following features need to be enabled to create reports representing email trends across a company with several C-Series appliances? (Choose two.)

Question

Options

• ACentralized Reporting on the M-Series
• BLocalized Reporting on the M-Series
• CCentralized Reporting on the C-Series
• DLocalized Reporting on the C-Series

• A
  77% (24)
• B
  6% (2)
• D
  16% (5)

Explanation

To generate company-wide email trend reports spanning multiple C-Series appliances, both ends of the reporting relationship must be configured for centralized operation: the M-Series Security Management Appliance (SMA) must have Centralized Reporting enabled (A) so it can aggregate and display data from all connected appliances, and each C-Series appliance must also have Centralized Reporting enabled (C) so it forwards its tracking and reporting data to the M-Series instead of storing it locally.

Why the distractors are wrong:

• B (Localized Reporting on M-Series): This would generate reports using only data local to the M-Series itself - not data collected from C-Series appliances - so it cannot produce a company-wide view.
• D (Localized Reporting on C-Series): This keeps reporting data siloed on each individual C-Series appliance, meaning no cross-appliance aggregation occurs and reports only reflect one device.

Memory tip: Think of it as a two-way handshake - the M-Series must be ready to receive (Centralized Reporting ON), and each C-Series must be configured to send (Centralized Reporting ON). If either side stays "localized," the data never flows to the central hub and you can't see the full company picture.

No community discussion yet for this question.