<?xml version="1.0" encoding="UTF-8"?>
<rss xmlns:content="http://purl.org/rss/1.0/modules/content/" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#" xmlns:taxo="http://purl.org/rss/1.0/modules/taxonomy/" version="2.0">
  <channel>
    <title>topic Re: user Web activity in General Topics</title>
    <link>https://live.paloaltonetworks.com/t5/general-topics/user-web-activity/m-p/31718#M23199</link>
    <description>&lt;HTML&gt;&lt;HEAD&gt;&lt;/HEAD&gt;&lt;BODY&gt;&lt;P&gt;I tried setting to alert but still no luck!&lt;/P&gt;&lt;/BODY&gt;&lt;/HTML&gt;</description>
    <pubDate>Tue, 30 Nov 2010 14:16:40 GMT</pubDate>
    <dc:creator>blueteam</dc:creator>
    <dc:date>2010-11-30T14:16:40Z</dc:date>
    <item>
      <title>user Web activity</title>
      <link>https://live.paloaltonetworks.com/t5/general-topics/user-web-activity/m-p/31716#M23197</link>
      <description>&lt;HTML&gt;&lt;HEAD&gt;&lt;/HEAD&gt;&lt;BODY&gt;&lt;P&gt;Is there any way that I can see the user/users web activity? There is an option on the Monitor tab&amp;gt;logs&amp;gt;URL Filtering.&lt;/P&gt;&lt;P&gt;However these logs show only the blocked pages. I would like to see the whole log with blocked /allowed sites. &lt;/P&gt;&lt;/BODY&gt;&lt;/HTML&gt;</description>
      <pubDate>Mon, 22 Nov 2010 09:59:50 GMT</pubDate>
      <guid>https://live.paloaltonetworks.com/t5/general-topics/user-web-activity/m-p/31716#M23197</guid>
      <dc:creator>blueteam</dc:creator>
      <dc:date>2010-11-22T09:59:50Z</dc:date>
    </item>
    <item>
      <title>Re: user Web activity</title>
      <link>https://live.paloaltonetworks.com/t5/general-topics/user-web-activity/m-p/31717#M23198</link>
      <description>&lt;HTML&gt;&lt;HEAD&gt;&lt;/HEAD&gt;&lt;BODY&gt;&lt;P&gt;You may need to set your URL filtering profile to alert.&lt;/P&gt;&lt;/BODY&gt;&lt;/HTML&gt;</description>
      <pubDate>Tue, 23 Nov 2010 15:03:51 GMT</pubDate>
      <guid>https://live.paloaltonetworks.com/t5/general-topics/user-web-activity/m-p/31717#M23198</guid>
      <dc:creator>Klein_it</dc:creator>
      <dc:date>2010-11-23T15:03:51Z</dc:date>
    </item>
    <item>
      <title>Re: user Web activity</title>
      <link>https://live.paloaltonetworks.com/t5/general-topics/user-web-activity/m-p/31718#M23199</link>
      <description>&lt;HTML&gt;&lt;HEAD&gt;&lt;/HEAD&gt;&lt;BODY&gt;&lt;P&gt;I tried setting to alert but still no luck!&lt;/P&gt;&lt;/BODY&gt;&lt;/HTML&gt;</description>
      <pubDate>Tue, 30 Nov 2010 14:16:40 GMT</pubDate>
      <guid>https://live.paloaltonetworks.com/t5/general-topics/user-web-activity/m-p/31718#M23199</guid>
      <dc:creator>blueteam</dc:creator>
      <dc:date>2010-11-30T14:16:40Z</dc:date>
    </item>
    <item>
      <title>Re: user Web activity</title>
      <link>https://live.paloaltonetworks.com/t5/general-topics/user-web-activity/m-p/31719#M23200</link>
      <description>&lt;HTML&gt;&lt;HEAD&gt;&lt;/HEAD&gt;&lt;BODY&gt;&lt;P&gt;I just created a custom report to do this. &lt;/P&gt;&lt;P&gt;&lt;/P&gt;&lt;P&gt;Use the "URL Log" database.&lt;/P&gt;&lt;P&gt;&lt;/P&gt;&lt;P&gt;Choose columns that you would like included in the report. I chose:&lt;/P&gt;&lt;P&gt;1. Source User&lt;/P&gt;&lt;P&gt;2. URL&lt;/P&gt;&lt;P&gt;3. Destination Host Name&lt;/P&gt;&lt;P&gt;4. Destination Address&lt;/P&gt;&lt;P&gt;5. Bytes&lt;/P&gt;&lt;P&gt;&lt;/P&gt;&lt;P&gt;Add some logical operators. In my case I chose:&lt;/P&gt;&lt;P&gt;&lt;/P&gt;&lt;P&gt;AND (URL = is present) (USER = benjamin)&lt;/P&gt;&lt;P&gt;&lt;/P&gt;&lt;P&gt;In the example above AND is a "group" and the two items in parenthesis are "conditions"&lt;/P&gt;&lt;/BODY&gt;&lt;/HTML&gt;</description>
      <pubDate>Tue, 30 Nov 2010 14:28:07 GMT</pubDate>
      <guid>https://live.paloaltonetworks.com/t5/general-topics/user-web-activity/m-p/31719#M23200</guid>
      <dc:creator>bpappas</dc:creator>
      <dc:date>2010-11-30T14:28:07Z</dc:date>
    </item>
    <item>
      <title>Re: user Web activity</title>
      <link>https://live.paloaltonetworks.com/t5/general-topics/user-web-activity/m-p/31720#M23201</link>
      <description>&lt;HTML&gt;&lt;HEAD&gt;&lt;/HEAD&gt;&lt;BODY&gt;&lt;P&gt;removed the (USER=asdasdasd) part and chose top 500 , worked like a charm. Needs a little tuning but thank you very much indeed.&lt;/P&gt;&lt;/BODY&gt;&lt;/HTML&gt;</description>
      <pubDate>Tue, 30 Nov 2010 14:52:57 GMT</pubDate>
      <guid>https://live.paloaltonetworks.com/t5/general-topics/user-web-activity/m-p/31720#M23201</guid>
      <dc:creator>blueteam</dc:creator>
      <dc:date>2010-11-30T14:52:57Z</dc:date>
    </item>
  </channel>
</rss>

