Virtual Secure Web Gateway

We currently use Web Gateway in inline blocking + proxy mode and have a daily report on each IP address and the websites visited.  However, this report groups websites by hits, giving the last time visited and the total hits for the site and we need specific times each website was visited.

I have tried various filters but the report still shows the last visit with the number of hits during the day.

Is there a way to get a report that shows each visit and the time of visit that can be ftpd off nightly?

Unfortuantly there are not time reporting options to see exactly when a URL/site was accessed. 

Unfortunately this causes a problem as if an investigation is started we need to show the date and time an IP address visited the site in question.  Is this something in the pipeline or do we need to look into something else?

I do not know if this will be a feature added in the future or not as I am not involved with the devlopment process. You can post an idea to the ideas section which will be reviewed by the management teams.

Hi,

The following SWG feature can help:

SWG consolidates the reports by default after 0 days so, different entries from the same computer to the same domain name will be displayed as a single report entry. The administrator can postpone this consolidation for up to 28 days and maintain visibility of all the different URLs within a given domain by accessing Administration -> Configuration -> Modules and changing the number of days under:

Consolidation  - Disable report consolidation of Content Filter events for the first 0 days

This will of course increase the database usage.

Federico

I was just about to ask a similar question to R H M.

I'll do the change that Federico suggested and reply back.

In the mean time, if I changed the categories from 'Allow' to 'Monitor' would that then log every URL/site that the users would visit?

Thanks

Hi,

monitor will effectively create a log entry for those URLs matching that setting.

Regards,

Federico

Just thought I'd let people though, tried change the Report Consolidation to 7 days but that doesn't give me what I need.

I guess I'll be changing everything to Monitor so I can get Internet history for people.

Also, where is the ideas section so I can submit this as an idea for a future release?

Thanks

Hi,

to post an idea use the drop-down menu by clicking on "Create Content" (on the left of your Account options) and select Ideas.

The rest is very easy to do.

Thanks,

Federico

@kenglam

The suggestion from Federico works as long as anything not blocked is set to monitor.  Our consolidation is now set to 7 days and each URL visited is logged and shown in reports.