<?xml version="1.0" encoding="UTF-8"?>
<rss xmlns:content="http://purl.org/rss/1.0/modules/content/" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#" xmlns:taxo="http://purl.org/rss/1.0/modules/taxonomy/" version="2.0">
  <channel>
    <title>topic Re: Site Visited User Report by Time. in General Topics</title>
    <link>https://live.paloaltonetworks.com/t5/general-topics/site-visited-user-report-by-time/m-p/20279#M14764</link>
    <description>&lt;HTML&gt;&lt;HEAD&gt;&lt;/HEAD&gt;&lt;BODY&gt;&lt;P&gt;My best guess is that it cannot create such report unless you add some sort of estimate for how long an ongoing session will be.&lt;/P&gt;&lt;P&gt;&lt;/P&gt;&lt;P&gt;The data a PA will save is the lifetime of a single session. A session is either a tcp-session or a udp session regarding TTL settings.&lt;/P&gt;&lt;P&gt;&lt;/P&gt;&lt;P&gt;This gives that unless keepalive is being used on the http server the client will have multiple (tcp)sessions towards this webserver during a single visit (or rather a single visit where the client is browsing around on this particular site). So there is (as far as I know) no data stored in the PA to determine if the client visited this site at 12:00 and at 12:10 used the same browser session or if it is one person browsing from this client at 12:00 and at 12:10 it was someone else (with a different browser but from the same client ip) who visited the same site.&lt;/P&gt;&lt;P&gt;&lt;/P&gt;&lt;P&gt;I guess contacting your Sales Engineering and suggest this report type as a feature request would be something good to do because I guess more will request the same thing (specially from those who replace a webproxy with a PA device).&lt;/P&gt;&lt;/BODY&gt;&lt;/HTML&gt;</description>
    <pubDate>Tue, 04 Sep 2012 11:52:44 GMT</pubDate>
    <dc:creator>mikand</dc:creator>
    <dc:date>2012-09-04T11:52:44Z</dc:date>
    <item>
      <title>Site Visited User Report by Time.</title>
      <link>https://live.paloaltonetworks.com/t5/general-topics/site-visited-user-report-by-time/m-p/20278#M14763</link>
      <description>&lt;HTML&gt;&lt;HEAD&gt;&lt;/HEAD&gt;&lt;BODY&gt;&lt;P&gt;Hi,&lt;/P&gt;&lt;P&gt;We have migrated from WebMarshal to using the PaloAlto and can generate most of the reports we need to except for a report that shows the time spent on a Website by a user over a selected period of time.&amp;nbsp; This is quite handy to see who is really time wasting.&amp;nbsp; If this report is possible can someone please assist with configuring it.&amp;nbsp; Also if it is there but I can't find it please point me in the right direction!&lt;/P&gt;&lt;P&gt;&lt;/P&gt;&lt;P&gt;Thanks in advance&lt;/P&gt;&lt;P&gt;&lt;/P&gt;&lt;P&gt;Jason&lt;/P&gt;&lt;/BODY&gt;&lt;/HTML&gt;</description>
      <pubDate>Tue, 04 Sep 2012 02:10:53 GMT</pubDate>
      <guid>https://live.paloaltonetworks.com/t5/general-topics/site-visited-user-report-by-time/m-p/20278#M14763</guid>
      <dc:creator>Jason_Mills</dc:creator>
      <dc:date>2012-09-04T02:10:53Z</dc:date>
    </item>
    <item>
      <title>Re: Site Visited User Report by Time.</title>
      <link>https://live.paloaltonetworks.com/t5/general-topics/site-visited-user-report-by-time/m-p/20279#M14764</link>
      <description>&lt;HTML&gt;&lt;HEAD&gt;&lt;/HEAD&gt;&lt;BODY&gt;&lt;P&gt;My best guess is that it cannot create such report unless you add some sort of estimate for how long an ongoing session will be.&lt;/P&gt;&lt;P&gt;&lt;/P&gt;&lt;P&gt;The data a PA will save is the lifetime of a single session. A session is either a tcp-session or a udp session regarding TTL settings.&lt;/P&gt;&lt;P&gt;&lt;/P&gt;&lt;P&gt;This gives that unless keepalive is being used on the http server the client will have multiple (tcp)sessions towards this webserver during a single visit (or rather a single visit where the client is browsing around on this particular site). So there is (as far as I know) no data stored in the PA to determine if the client visited this site at 12:00 and at 12:10 used the same browser session or if it is one person browsing from this client at 12:00 and at 12:10 it was someone else (with a different browser but from the same client ip) who visited the same site.&lt;/P&gt;&lt;P&gt;&lt;/P&gt;&lt;P&gt;I guess contacting your Sales Engineering and suggest this report type as a feature request would be something good to do because I guess more will request the same thing (specially from those who replace a webproxy with a PA device).&lt;/P&gt;&lt;/BODY&gt;&lt;/HTML&gt;</description>
      <pubDate>Tue, 04 Sep 2012 11:52:44 GMT</pubDate>
      <guid>https://live.paloaltonetworks.com/t5/general-topics/site-visited-user-report-by-time/m-p/20279#M14764</guid>
      <dc:creator>mikand</dc:creator>
      <dc:date>2012-09-04T11:52:44Z</dc:date>
    </item>
  </channel>
</rss>

