08-27-2002 06:51 AM - edited 02-20-2020 10:13 PM
Could you suggest tools to create reports on users activity thru PIX . We use Websence software, but it shows destination only, without traffic, protocol?
Thanks
08-29-2002 01:17 AM
Use a Tacacs Server and enable aaa accounting for your needed reports. You can get accounting reports based on inbound and outbound IP addresses. If you want to get reports based on usernames, you must also authenticate the users against your tacacs server.
Regards Norbert
08-30-2002 02:06 PM
A simple solution to collect info on all traffic that traverse the PIX is to configure the pix to dump its log into a syslog server. We use syslog on a solaris server and set the debug level to 7 on the PIX. Expect a lot of data though. If you use Windows, I am sure you can find syslog for windows. You get verything: source ip/port destination ip/port and where applicable, full URL info. And it is all timestamped, of course.
Good luck.
gilles
Discover and save your favorite ideas. Come back to expert answers, step-by-step guides, recent topics, and more.
New here? Get started with these tips. How to use Community New member guide