cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
887
Views
5
Helpful
2
Replies

Sourcefire ability to report granular user activity?

jacenkoj33
Level 1
Level 1

I've dug in some in the admin console and browsed the user guide... But it appears at first glance the reporting will not be granular to the point of dates, times, hits, and url for any specific user. A true user browsing report in detail like a product like Webspy or a true web proxy like McAfee webgateway or Bluecoat? Would this be accurate or is the more to the reporting than I'm seeing? My manager wants to be able to pull evidence of any given employee and wants detailed browsing reports of every hit url data and time.... On the surface I don't see this is a reporting strength of Sourcefire?

Thanks, 

2 Replies 2

Dennis Perto
Level 5
Level 5

If you think about it the Firepower Management Center reporting is not very good at what you want it to do. It is not intended for logging.

Instead you should configure a syslog server, and pull the reports from there. 

That is a really great idea. I hadn't thought of it from that angle. 

Review Cisco Networking products for a $25 gift card