How to track user´s activity?

[ron_maiga]

Hello,

does anybody know how to track company users activity i Palo Alto fw?

Best regards

[panos]

what do you mean by tracking ?

what do you need about user's activity except for user activity report.

[craymond]

The user activity report in 4.x is fairly useless unless you have something very specific you are looking for, and even then it may be very difficult as any site that has links to another site like facebook shows up in the log! You just get hundreds of pages of every link that is on every webpage that someone visits. We have not upgraded to 5.x yet, but supposedly the user activity reporting is a lot better. I haven't seen it so I don't know for sure.

[Phoenix]

Hello Ron,

Yes to track details about certain user we can user activity report. But we can do a lot more from custom report on the device.

I have selected Database to be Traffic log, you have other options too. We can select what columns to be displayed in the report.

Later I have selected a username in the Query Builder this makes sure all logs are pertaining to this user. If username is not there we can select the source IP address and track the data of a user.

Hope this helps.

[sjamaluddin]

You may want to also set the box for "log container pages" under each URL profile to diminish the number of links that show up against the user's URL activities. This will (should) limit the URLs that are spawned within each website and only register the main URLs. Though depending on the way the web page is designed, you may still see many URLs off of each page visit.

[mbutt]

If you are looking to know How to create a report to show the amount of time a user spent at a specific website below doc explains it

https://live.paloaltonetworks.com/docs/DOC-2202

Hope this helps.
Numan

[ron_maiga]

Hey everyone,

thank you so very much for the priceless help with your answers.

Best regards