topic Is there any way to get the sites visited in the "User Activity Report"? in General Topics

Is there any way to get the sites visited in the "User Activity Report"?

exclusive — Wed, 17 Aug 2011 12:39:46 GMT

• Using the module "User activity report" provides information on sites that are blocked for a user by a PA rule. If a user matches any blocked site, then this information comes in white.
• To understand the behavior of a user, using a "Custom Report" with some parameters.

My question is whether there is any way to get the sites visited in the "User Activity Report" even activating some parameter in the navigation rules.
The report of the "Custom Report" is very unfriendly.

Regards

JAG

Re: Is there any way to get the sites visited in the "User Activity Report"?

bpappas — Wed, 09 Nov 2011 04:26:46 GMT

The Palo Alto Networks products will only log URLs visited in the reports if you have the "action" under the URL filtering profile(s) set to "alert" "block" continue" or "override".

We do not log on the "allow" action.

Hopefully this will help you get the results you desire in your reporting.

Thank you,

Benjamin

Re: Is there any way to get the sites visited in the "User Activity Report"?

moorken — Thu, 27 Sep 2012 09:44:54 GMT

Hi, we have exactly the same "problem". if its only logging the blocked sites its not a user activity report but more a block report. now we have for example some users which are exesively using "news-and-media" or "streaming-media" but we want to know more in detail what kind of websites they are visiting under this category, because it can be so many different things.

i really hope future releases of the PAN-OS will contain complete logging, or at least have an option to activate detailed logging. I'm sure that almost any PA Admin would love to have this function....

Re: Is there any way to get the sites visited in the "User Activity Report"?

ppatel — Thu, 27 Sep 2012 10:15:25 GMT

Hi ,

The User Activity Report has:

Browsing Summary by Category
Browsing Summary by Website
Detailed Web Browsing Activity

In order for the report to display the above, a URL filtering Profile must be created using the alert option in the required categories. This will solve your purpose of doing a report generation and at the same time allowing users to access the desired category. You can set news and media to alert , the user would not be alerted while he goes to any news website , but the firewall will start logging in URL logs and hence User activity report.

Let me know if this helps.

Regards

Parth

Re: Is there any way to get the sites visited in the "User Activity Report"?

PANoJAM — Wed, 20 Mar 2013 17:12:20 GMT

This works.

Re: Is there any way to get the sites visited in the "User Activity Report"?

jeffhooi — Wed, 22 May 2013 09:03:57 GMT

This works..
Thanks!