topic Re: Find who added a URL in Custom category in Web Security

Find who added a URL in Custom category

kostasthedelegate — Thu, 15 Apr 2021 07:10:48 GMT

Hello,

I am trying to find which user inserted in a custom URL category an entry.

I have WSA managed by SMA

Is there any log I could find that info?

How much tome back could I find logs?

Thanks and regards,

Konstantinos

Re: Find who added a URL in Custom category

balaji.bandi — Thu, 15 Apr 2021 10:10:19 GMT

check the Audit Logs :

https://www.cisco.com/c/en/us/td/docs/security/security_management/sma/sma11-0/user_guide/b_SMA_Admin_Guide/b_SMA_Admin_Guide_chapter_01110.html

Re: Find who added a URL in Custom category

kostasthedelegate — Thu, 15 Apr 2021 10:14:36 GMT

Hello

The audit logs are for cli.

The change I would like to see is through the web gui

Re: Find who added a URL in Custom category

balaji.bandi — Thu, 15 Apr 2021 10:52:45 GMT

SMA GUI - Web - Utilities- check Publish History Only give you certain degree of information, it will not tell you what is changed, If you have change control in Place, that change should tell you what user/admin changing.

Re: Find who added a URL in Custom category

kostasthedelegate — Thu, 15 Apr 2021 12:02:46 GMT

"change control in Place"

What exactly do you mean by that ?

Is there somewhere I can find it to configure it?

Re: Find who added a URL in Custom category

kostasthedelegate — Mon, 19 Apr 2021 10:34:17 GMT

Anyone knows what control in place could be?

Or how could I check which user performed what on the gui?

Re: Find who added a URL in Custom category

balaji.bandi — Mon, 19 Apr 2021 11:25:50 GMT

at this its hard to say what is changed, until you have configuraiton in place to compare.

Change in place means, most of the organisation follow ITILv3 or v4 process, before making any changes they make change process to review and follow the same process to apply the same in Live environment.