topic Re: Complete URL value in syslog in Network Security https://community.cisco.com/t5/network-security/complete-url-value-in-syslog/m-p/818378#M975911 <HTML><HEAD></HEAD><BODY><P>http inspection can do this. in 6.x and earlier os versions, use the fixup http command. in 7.x and later, use http inspection - <A class="jive-link-custom" href="http://www.cisco.com/en/US/docs/security/asa/asa72/configuration/guide/inspect.html#wp1514315" target="_blank">http://www.cisco.com/en/US/docs/security/asa/asa72/configuration/guide/inspect.html#wp1514315</A></P></BODY></HTML> Mon, 06 Aug 2007 12:14:44 GMT srue 2007-08-06T12:14:44Z Complete URL value in syslog https://community.cisco.com/t5/network-security/complete-url-value-in-syslog/m-p/818377#M975892 <P>Hi,</P><P></P><P>PIX is giving the following syslog when somebody browsing <A class="jive-link-custom" href="http://www.xyz.com." target="_blank">www.xyz.com.</A> Since this message does not contain <A class="jive-link-custom" href="http://www.xyz.com," target="_blank">www.xyz.com,</A> I am trying to get the website name through reverse dnslookup of yyy.yyy.yyy.yyy, but it returns datacenter ip address of a IP hosting company instead of <A class="jive-link-custom" href="http://www.xyz.com." target="_blank">www.xyz.com.</A></P><P></P><P></P><P>&lt;165&gt;Dec 07 2006 23:19:01: %PIX-5-304001: xxx.xxx.xxx.xxx Accessed URL yyy.yyy.yyy.yyy:/images/test.jpg</P><P></P><P>Is there a way to get <A class="jive-link-custom" href="http://www.xyz.com" target="_blank">www.xyz.com</A> in the syslog message? or through some utility? Since firewall inspects all the packets, I think firewall can give this data. Or am I missing any configuration.</P><P></P><P>regards,</P><P>LSP</P><P></P><P></P> Mon, 11 Mar 2019 10:53:06 GMT https://community.cisco.com/t5/network-security/complete-url-value-in-syslog/m-p/818377#M975892 mskumar_apk 2019-03-11T10:53:06Z Re: Complete URL value in syslog https://community.cisco.com/t5/network-security/complete-url-value-in-syslog/m-p/818378#M975911 <HTML><HEAD></HEAD><BODY><P>http inspection can do this. in 6.x and earlier os versions, use the fixup http command. in 7.x and later, use http inspection - <A class="jive-link-custom" href="http://www.cisco.com/en/US/docs/security/asa/asa72/configuration/guide/inspect.html#wp1514315" target="_blank">http://www.cisco.com/en/US/docs/security/asa/asa72/configuration/guide/inspect.html#wp1514315</A></P></BODY></HTML> Mon, 06 Aug 2007 12:14:44 GMT https://community.cisco.com/t5/network-security/complete-url-value-in-syslog/m-p/818378#M975911 srue 2007-08-06T12:14:44Z