pix log analyse

[standist]

With a Websense software ,we can get a very detailed internet active report.There is what time ,what web page that request not only the web site in the report.

Can I get the information in the report by analyse the pix log message?I want get the web page not just web site.For websense is very expensive.

[shannong]

From the Pix you can get the full URL EXCEPT the host/web server with fixup http enabled and logging trap level 6. The log message number is 304001.

The Pix will log the IP of the destination server instead of the original host name. eg. www.web.com followed by the full URL.

[standist]

Thanks for reply.

Is there a way that can get the original host name not the ip address.For sometimes you access http://ip

,it told you that access denied ,but http://domain is all fine.so I can't know which domain the ip corresponding.

[shannong · Accepted solution]

Unfortunately, the pix only provides the IP and not the FQDN. This may change in v7.0 since the Pix will have the abilities for inspecting URLs.