Solved

How can i trace the websites used by the user in Watchguard firewall

Posted on 2010-09-07
3
703 Views
Last Modified: 2013-11-16
I am the network admin of my company. I have watchguard firewall in place, now i wanted to trace all the websites used by the users or wanted to trace the traffic what individual users are going to.I can see the traffic on traffic monitoring tab on the firewall but how would i know what traffic or what person is going to what website.  Moreover i have issue blocking facebook website for some reason on my firewall. If you can help me with it, that will be the additional help.
0
Comment
Question by:kedarvyas
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
3 Comments
 
LVL 32

Accepted Solution

by:
dpk_wal earned 250 total points
ID: 33624664
If you wish to see the connections at run-time then use hostwatch [would not give all details].

Other option is if you have logging enabled then you can create reports which would fetch sites accessed by the user(s).
For this to work, you should either have static IP on network, then based on IP you know which user is it and you would have details of all web sites accessed.

If you running on dynamic IPs then you can configure authentication based internet access for users, now you would know the username and web site accessed.

For configuring authentication, please have a look at one of my previous answers:
http://www.experts-exchange.com/Security/Software_Firewalls/Enterprise_Firewalls/Watchguard_Firewall/Q_26176879.html

Last option is use some external [third party] log aggregator software, which would give you these details. Am not sure on the specific products so would not be able to advice here.

Please update if you need more help or wish to pursue some other option.

Thank you.
0
 
LVL 1

Expert Comment

by:mere-mortal
ID: 33625047
What revsion of Firmware are you running?
0
 

Author Closing Comment

by:kedarvyas
ID: 33629529
Good Help

Thanks
0

Featured Post

Optimize your web performance

What's in the eBook?
- Full list of reasons for poor performance
- Ultimate measures to speed things up
- Primary web monitoring types
- KPIs you should be monitoring in order to increase your ROI

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Do you have a windows based Checkpoint SmartCenter for centralized Checkpoint management?  Have you ever backed up the firewall policy residing on the SmartCenter?  If you have then you know the hassles of connecting to the server, doing an upgrade_…
The DROP (Spamhaus Don't Route Or Peer List) is a small list of IP address ranges that have been stolen or hijacked from their rightful owners. The DROP list is not a DNS based list.  It is designed to be downloaded as a file, with primary intention…
In this video we outline the Physical Segments view of NetCrunch network monitor. By following this brief how-to video, you will be able to learn how NetCrunch visualizes your network, how granular is the information collected, as well as where to f…
In this brief tutorial Pawel from AdRem Software explains how you can quickly find out which services are running on your network, or what are the IP addresses of servers responsible for each service. Software used is freeware NetCrunch Tools (https…
Suggested Courses

628 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question