Guest Activity on Cisco ISE

[Gino Monje]

Is it possible to monitor the web pages visited for a guest using cisco ISE?                  

[Jatin Katyal]

Have you gone through the section

Monitoring Guest Activity

http://www.cisco.com/en/US/docs/security/ise/1.1.1/user_guide/ise_mnt.html#wp1065613

~BR
Jatin Katyal

**Do rate helpful posts**

[Anas Naqvi]

Hi Gino,

Yes, you can use the Guest Activity option. The Guest Activity report provides details about the websites that guest users are visiting. You can use this report for security auditing purposes to demonstrate when guest users accessed the network and what they did on it.

This report is available at: Operations > Reports > Endpoints and Users > Guest Activity.

To use this report you must first:

•Enable the passed authentications logging category. Choose Administration > Logging > Logging Categories and select Passed authentications.

•Enable these options on the firewall used for guest traffic:

–Inspect HTTP traffic and send data to Cisco ISE Monitoring node. Cisco ISE only requires the the IP address and accessed URL for the Guest Activity report so, if possible, limit the data to include just this information.

–Send syslogs to Cisco ISE Monitoring node

Please check the below link for further information,

http://www.cisco.com/en/US/docs/security/ise/1.2/user_guide/ise_guest_pol.html#wp1056645

[walczakw1234]

Hi

Do you know if user from External Identity Sources (Active Directory) should be visible in the Guest_Activiti report?

I try to monitor the web pages visited for a AD users using cisco ISE.

Wojtek