How to get user logged in to ironport web

[asamatar]

How to get user logged in to ironport web by  their username, time connected and the IP address?

[tidavids · Accepted solution]

The information is captured in the raw accesslogs and depicted in the onbox reports.

A user report will show what time a user accessed the web throughout the day, week, month, as well as their top categories, time spent per category, applications, security events, etc.

To identify what IP address they were using, one can click on any of the entries to zoom into the Web Tracking report which will provide that information.

~Tim

[asamatar]

Hello Tim,

Thanks for the response. We are  looking for REAL TIME monitoring to check the connected users (online) at any time.

Best Regards,

Abdulatif Samatar

[tidavids]

The onbox reporting can only show what web traffic is currently being surfed.  We can provide a near-real time view of this web traffic with a "Web Tracking Report".

However, there is not a report available that depicts what you're describing.  (This information is best contained on the domain server).  The closes we could get with the WSA is displaying which credentials we are currently caching.  (Which users we've seen since within the surrogate timeout).  This is possible with the authcache command on the cli.

~Tim