IOS Zone Based Firewall URLvisited logging

Tony_S — Sun, 31 Mar 2024 14:42:21 GMT

Hello, for reasons of compliance we are required to syslog URL visited.

With the config below (not full) I am able to see the IP visited, and this only for http.

Is there a way to syslog the http and https URLs ?

parameter-map type urlf-glob PERMITTEDSITES
pattern *

class-map type urlfilter match-any BLOCKEDSITES
match server-domain urlf-glob BLOCKEDSITES
class-map type inspect match-any HTTP

class-map type inspect match-any INSIDE-TO-OUTSIDE-CLASS
match access-group name INSIDE-TO-OUTSIDE

policy-map type inspect urlfilter CONTENT-FILTERING
class type urlfilter BLOCKEDSITES
log
allow
class type urlfilter PERMITTEDSITES
allow
log
policy-map type inspect INSIDE-TO-OUTSIDE-POLICY
class type inspect HTTP
inspect
service-policy urlfilter CONTENT-FILTERING
class type inspect HTTPS
inspect
class type inspect DNS
inspect
class class-default
pass

Which produces logs of the type:

<190>2719: *Mar 31 13:35:11.239: %URLF-6-SITE_ALLOWED: (target:class)-(IN-TO-OUT:HTTP):Client 10.XXX.XXX.237:63774 accessed server 146.75.118.172:80

Thanks in advance.

Re: IOS Zone Based Firewall URLvisited logging

MHM Cisco World — Mon, 01 Apr 2024 17:57:21 GMT

There is command ""alert"" check it

MHM

topic IOS Zone Based Firewall URLvisited logging in Network Security

IOS Zone Based Firewall URLvisited logging

Re: IOS Zone Based Firewall URLvisited logging