"Network Accounting" takes the toal IP traffic (including IP, TCP and HTTP headers), whereas "Web Security" reports on HTTP content (which is, obviously, less than the total IP traffic).