Virtual Secure Web Gateway

Hi All

Does anyone know if it's possible to detect what the usage is on Dropbox and Evernote with the webgateway and who are using it?

We are running on a TAP/ Span port with version 5.0.2.8

Regards

Hi,

Just some ideas:

you can certainly see machines hitting dropbox URLs from the custom reports. Make sure relevant columns are enabled. Just filter by distant URL and use "contains" "dropbox". You will see number of hits but unfortunately no measure in terms of the amount of traffic.

If possible you can also find out the IP addresses of the dropbox servers and create a filter based on that.

If SWG has been integrated with Active Directory and authentication is implemented, you can then see the login name that corresponds to the offending machine as well.

Regards,

Federico

If you have the content filtering license you should be able to run a report for those sites.

I've never heard of Evernote, but I know that Dropbox uses SSL and may not show up in logs unless you are using Proxy mode with SSL Deep Inspection.