topic Re: [WEB BROWSING] - URL log retention in Network Access Control

[WEB BROWSING] - URL log retention

OlivierChambelant25989 — Wed, 15 Jan 2020 14:56:35 GMT

Hello,

I would like to know, please, if Cisco ISE offers a retention system, during one year, for URL logs for users' Internet surfing.

Thank you and best regards.

Re: [WEB BROWSING] - URL log retention

Colby LeMaire — Wed, 15 Jan 2020 15:01:31 GMT

No, it does not. ISE does not capture URL's the clients are browsing to. For that capability, you would need a Web Proxy of some sort.

Re: [WEB BROWSING] - URL log retention

OlivierChambelant25989 — Wed, 15 Jan 2020 15:07:09 GMT

Hello,
Thanks for this quick reply !!!
Have a nice day 🙂

Re: [WEB BROWSING] - URL log retention

Jason Kunst — Wed, 15 Jan 2020 15:58:18 GMT

@Colby LeMaire wrote:

No, it does not. ISE does not capture URL's the clients are browsing to. For that capability, you would need a Web Proxy of some sort.

The network device has to send the URL to ISE which you can look at using the guest activity report. Its a quick dirty method. Otherwise use some external logging reporting like Splunk.

https://community.cisco.com/t5/policy-and-access/ise-guest-activity-report/td-p/2093447

https://community.cisco.com/t5/identity-services-engine-ise/ise-guest-traffic-log/td-p/3830925