Hello, for reasons of compliance we are required to syslog URL visited.
With the config below (not full) I am able to see the IP visited, and this only for http.
Is there a way to syslog the http and https URLs ?
parameter-map type urlf-glob PERMITTEDSITES
pattern *
class-map type urlfilter match-any BLOCKEDSITES
match server-domain urlf-glob BLOCKEDSITES
class-map type inspect match-any HTTP
class-map type inspect match-any INSIDE-TO-OUTSIDE-CLASS
match access-group name INSIDE-TO-OUTSIDE
policy-map type inspect urlfilter CONTENT-FILTERING
class type urlfilter BLOCKEDSITES
log
allow
class type urlfilter PERMITTEDSITES
allow
log
policy-map type inspect INSIDE-TO-OUTSIDE-POLICY
class type inspect HTTP
inspect
service-policy urlfilter CONTENT-FILTERING
class type inspect HTTPS
inspect
class type inspect DNS
inspect
class class-default
pass
Which produces logs of the type:
<190>2719: *Mar 31 13:35:11.239: %URLF-6-SITE_ALLOWED: (target:class)-(IN-TO-OUT:HTTP):Client 10.XXX.XXX.237:63774 accessed server 146.75.118.172:80
Thanks in advance.
