Statistics

Terminology

Below is a general glossary of terminology used on the Statistics page.

Term	Meaning
Refine	Narrow the data shown (e.g., by action, endpoint, domain, location, ASN).
Filter	A blocklist category (product feature), not a UI control.
Endpoint	A device that enforces one or more Profiles.
Profile	A policy set of rules enforced by one or more Endpoints.
Organization / Sub-Organization	Your tenant hierarchy; selection controls scope.
Service	A first-class service (e.g., “YouTube”) that rules can target.

Note: If an Endpoint enforces multiple Profiles and you select a single Profile, you’ll see only the queries enforced by that Profile, not all queries from that Endpoint.

Top bar

Profile selector

Pick All Profiles or a single Profile to scope all charts and lists.

Time range

Options: Last hour, Last day, Last week, Last month, Last year, Custom (up to 1 year back).

Active refinements

Shows every refinement currently applied. Add more by hovering elements and clicking Refine.

You can refine by:

Action: Blocked, Bypassed, Redirected
Filter
Service
Domain
Endpoint
Source location (Country)
Destination location (Country)
Network source (ASN)
Network destination (ASN)

Click a pill to remove it.

Key metrics

Action summary

Blocked, Bypassed, Redirected, and Total queries.

Click a slice/legend to Refine by that action.
Click Total to clear action refinements.

Security overview

Bars that should trend near 100%:

Encrypted DNS - share of queries over DoH/DoT/DoQ
Benign Blocks - share of blocks attributable to non-security Filters (Filters other than Malware and Phishing)
Home Country Traffic - share of queries from your chosen home countries (manage via dropdown; up to 3 flags shown)

All metrics respect the time range and refinements.

Traffic chart

Interactive multi-series line chart:

Green = Bypassed, Red = Blocked, Yellow = Redirected
Click-drag a window to update the whole page
When refined by Action, the Y-axis auto-scales to that series

Endpoints overview

Ranked list (top 10; search for others) of Endpoints in the selected Organization (excludes Sub-Organizations if you are viewing a Parent Organization).

Each row shows:

Endpoint name
Endpoint last active time
Clients connected
Total queries OR Trend - the Trend percentage shows comparison of queries made over the period selected vs an equal length period immediately before it
Most active Filter for that Endpoint

Hover to Refine by Endpoint.

Clients overview

Appears when there is a Refinement selected for an individual Endpoint. This section has the same layout as Endpoints, minus “Clients connected”.

Each row shows:

Total queries and % of Endpoint total
Blocked vs typical — current vs baseline
Most active Filter

Hover to Refine by Client.

Top actions

Tabs affect only the three boxes in this section.

Blocked

Filters - top 10 Filter categories by share of Filter-blocked queries
Services - top 10 by share of Service-blocked queries
Domains - top 10 by share of all blocked queries
- Hover a domain → Refine to TLD / apex / full domain

Bypassed

Services - top 10 by share of Service-bypassed queries (overrides only; often small)
Domains - top 10 by share of all bypassed queries
- Hover a domain → Refine to TLD / apex / full domain

Redirected

Services - top 10 by share of Service-redirected queries
Domains - top 10 by share of all redirected queries
- Hover a domain → Refine to TLD / apex / full domain

Geography and networks (map)

Sources - top 10 origin countries
Destinations - top 10 destination countries
Network sources (list only) - top 10 originating ASNs
Network destinations (list only) - top 10 destination ASNs

Hover any item to Refine. On the map, white countries are clickable (adds a refinement and highlights the country).

Refinement behavior and scope

Refinements stack with AND logic
Clearing the Action refinement returns charts to all actions
Profile selection limits data to queries enforced by that Profile

Common tasks

See one Endpoint: Endpoints → hover → Refine
Investigate a spike: Drag over the spike → review Top actions and Endpoints
Trim noisy countries: Geography → click countries to refine by Source or Destination

Data Availability Notice

Since our new Analytics system has only been ingesting data since April 2025, you will not see data older than that on this page. If you'd like to get this older data (from the previous Analytics system), please contact support.