Solved

How can i trace the websites used by the user in Watchguard firewall

Posted on 2010-09-07
3
698 Views
Last Modified: 2013-11-16
I am the network admin of my company. I have watchguard firewall in place, now i wanted to trace all the websites used by the users or wanted to trace the traffic what individual users are going to.I can see the traffic on traffic monitoring tab on the firewall but how would i know what traffic or what person is going to what website.  Moreover i have issue blocking facebook website for some reason on my firewall. If you can help me with it, that will be the additional help.
0
Comment
Question by:kedarvyas
3 Comments
 
LVL 32

Accepted Solution

by:
dpk_wal earned 250 total points
ID: 33624664
If you wish to see the connections at run-time then use hostwatch [would not give all details].

Other option is if you have logging enabled then you can create reports which would fetch sites accessed by the user(s).
For this to work, you should either have static IP on network, then based on IP you know which user is it and you would have details of all web sites accessed.

If you running on dynamic IPs then you can configure authentication based internet access for users, now you would know the username and web site accessed.

For configuring authentication, please have a look at one of my previous answers:
http://www.experts-exchange.com/Security/Software_Firewalls/Enterprise_Firewalls/Watchguard_Firewall/Q_26176879.html

Last option is use some external [third party] log aggregator software, which would give you these details. Am not sure on the specific products so would not be able to advice here.

Please update if you need more help or wish to pursue some other option.

Thank you.
0
 
LVL 1

Expert Comment

by:mere-mortal
ID: 33625047
What revsion of Firmware are you running?
0
 

Author Closing Comment

by:kedarvyas
ID: 33629529
Good Help

Thanks
0

Featured Post

PRTG Network Monitor: Intuitive Network Monitoring

Network Monitoring is essential to ensure that computer systems and network devices are running. Use PRTG to monitor LANs, servers, websites, applications and devices, bandwidth, virtual environments, remote systems, IoT, and many more. PRTG is easy to set up & use.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Suggested Solutions

Title # Comments Views Activity
FQDN config to internal server 3 38
VPN client software 7 50
Network Activities  please help 16 79
Not able to ping DMZ port on Firewall from the switch. 11 57
If you are like regular user of computer nowadays, a good bet that your home computer is on right now, all exposed to world of Internet to be exploited by somebody you do not know and you never will. Internet security issues has been getting worse d…
Do you have a windows based Checkpoint SmartCenter for centralized Checkpoint management?  Have you ever backed up the firewall policy residing on the SmartCenter?  If you have then you know the hassles of connecting to the server, doing an upgrade_…
Microsoft Active Directory, the widely used IT infrastructure, is known for its high risk of credential theft. The best way to test your Active Directory’s vulnerabilities to pass-the-ticket, pass-the-hash, privilege escalation, and malware attacks …
Two types of users will appreciate AOMEI Backupper Pro: 1 - Those with PCIe drives (and haven't found cloning software that works on them). 2 - Those who want a fast clone of their boot drive (no re-boots needed) and it can clone your drive wh…

803 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question