Is it possible to generate a report on FirePower so we may see only the URLs that were entered by users or clicked upon.
Basically the URLs that show up in address bar.
The problem that I see is that the reports are too crowded with URLs from reference links that are found everywhere in websites: CDNs (CloudFlare, Akamai, MaxCDN etc...), Facebook pixels, Google Analytics and many other URLs which are referenced from visited URLs.
Example, if a user has opened website A, I only want to have a report for website A and not all other links which are in website A source (FB, GA, CDN, etc...)
A real example: An online store, which has virtual support through chat, makes hundreds of thousands of queries to externally hosted chat services, although the user never used it.
The network (and network sensor like Firepower service module or FTD or whatever) has no way to distinguish traffic coming from the browser as part of a user action (typing or clicking) or part of a page load.
More people are working remotely, and this increases the risk of security breaches and the difficulty in defending remote workers where they work and securing the devices they use.
Learn about Cisco Remote Secure Worker solutions that verify workers, secu...
ISE Node Terminology
Policy Administration Node
Monitoring & Troubleshooting Node
Policy Services Node
Platform Exchange Grid Node
The single plane of glass for ISE administration and configuration operatio...
On December 8, FireEye reported that it had been compromised in a sophisticated supply chain attack: more specifically through the SolarWinds Orion IT monitoring and management software. The attackers leveraged business software updates in order to distr...
About this Document
Cisco Secure Endpoint (formerly AMP for Endpoints) is a comprehensive Endpoint Security solution designed to function both as a stand-alone tool, and as a part of the architecture of natively integrated Cisco and 3rd par...