topic URL Filtering by IP in General Topics

URL Filtering by IP

Dave_Howard — Mon, 05 Dec 2016 17:16:15 GMT

Hello,

We would like to report on web browsing based on the IP off the user's computer, not username (or Identity). Can someone offer a guide, or point me in the right direction? Thank you.

Re: URL Filtering by IP

BPry — Mon, 05 Dec 2016 18:08:32 GMT

You would just need to apply a URL Filtering rule sepcific to that user's IP before your general browsing rule.

Alternatively you could generate a custom report that specifies the source IP of that user to limit the report ran to just that user's IP instead of the username.

Re: URL Filtering by IP

Brandon_Wertz — Tue, 06 Dec 2016 13:46:58 GMT

If you have an "ANY" source IP rule (or if you've got a rule with the IP network space the user should be coming from) that has the URL filtering profile applied to it with the action "Alert/Block/Continue" you are already capturing the information you want.

Just run a report from reports, use ACC, or review the URL logs from the "monitor" tab.

Re: URL Filtering by IP

fatboy1607 — Fri, 09 Dec 2016 10:28:28 GMT

First you need URL filtering license.

Then create URL profile - Objects - Security Profiles - URL filtering based of action you want to take.

Create group map all profile to that group like antivirus , anitspware, vulnerabiltiy, file blocking,wildfire.

map that profile to security policy for traffic going to internet.

Then go to monitor PDF reports -- user acitivity report and get Data.

Apart from that we can get Data from ACC also.

Re: URL Filtering by IP

Dave_Howard — Fri, 09 Dec 2016 17:33:15 GMT

I appreciate you all jumping in. Yes we have the URL filtering license, what I should have asked with more clarity is this:

Are the actual steps to creating these rules and report already available somewhere for me to follow, or does someone know said steps they'd be willing to out line for me? Thank you.

Re: URL Filtering by IP

BPry — Fri, 09 Dec 2016 20:01:32 GMT

The link HERE will provide you with how to setup the profile in your security rules. The report is just going to be a custom report targeting the URL database and then you would build a query to specify the IP of the user you want to target.