topic Sourcefire ability to report granular user activity? in Network Security

Sourcefire ability to report granular user activity?

jacenkoj33 — Tue, 12 Mar 2019 12:55:07 GMT

I've dug in some in the admin console and browsed the user guide... But it appears at first glance the reporting will not be granular to the point of dates, times, hits, and url for any specific user. A true user browsing report in detail like a product like Webspy or a true web proxy like McAfee webgateway or Bluecoat? Would this be accurate or is the more to the reporting than I'm seeing? My manager wants to be able to pull evidence of any given employee and wants detailed browsing reports of every hit url data and time.... On the surface I don't see this is a reporting strength of Sourcefire?

Thanks,

If you think about it the

Dennis Perto — Wed, 09 Mar 2016 09:55:09 GMT

If you think about it the Firepower Management Center reporting is not very good at what you want it to do. It is not intended for logging.

Instead you should configure a syslog server, and pull the reports from there.

That is a really great idea.

jacenkoj33 — Wed, 09 Mar 2016 15:19:12 GMT

That is a really great idea. I hadn't thought of it from that angle.