topic Re: User Activity Reports on Panorama in General Topics

User Activity Reports on Panorama

Nig — Fri, 05 Feb 2016 11:18:09 GMT

When we generate a UAR (Using Monitor/PDF Reports/User Activity Report) on Panorama for a particular managed firewall, we do not get any broswing summary sections in the report. If the same report is run on the firewall itself, we do get that information. What do we need to do get that information showing up in the Panorama reports?

We do run URL filtering, and all the categories in our rule are set to Alert so I think we are logging this information, it's just not showing up on Panorama. Is there something else we nned to do on Panorama in order to get this to work?

Regards

Nig

Re: User Activity Reports on Panorama

Raido_Rattameister — Fri, 05 Feb 2016 11:35:47 GMT

If you open security policy and go to "Actions" tab.

There is "Log Forwarding" option.

Have you set up log forwarding to send logs further to Panorama?

If you have then check Panorama traffic log.

Do you see users being identified there?

Re: User Activity Reports on Panorama

Nig — Mon, 08 Feb 2016 08:37:18 GMT

Thanx for the reply. Yes, we're definitely forwarding logs OK and see user names in both the traffic log and in URL filtering. I can also create a custom report that shows sites accessed by user but I don't think it's showing the correct information as the sites listed do not match those shown in a UAR generated on the firewall itself.