You can view live browsing. This is useful to understand why a site isn't displaying properly, why an application isn't working as it should or to view the policy for a user or groups of users. Web filter logs provide detailed, configurable and searchable information about web filtering activity regarding user and group activity, source IPs, requested URLs, categories of web content requested, and domains recorded. To see if a URL is blocked you can filter by the URL, where you can see the category in which the URL has been denied. You can view details of the rule by placing your mouse cursor over the rule. You can also click the rule to view and edit it. You can export logged data in comma-separated (CSV) format.
Wildcard character
You can use an asterisk (*) to filter the free search terms.
Examples
- john matches "john" (and nothing else)
- itc\ doesn't match anything
- itc\john matches "john" only, not "itc\john.doe"
- john* matches anything that contains "john", such as "john.doe", "itc\john", "john\here", "itc\john"
- itc\* matches anything that contains "itc\", such as "itc\john", "itc\jack"
- itc\hans* matches anything that contains itc\john such as "itc\john", "itc\john.doe", "otherdomain-itc\john.doe"
- 10.15.28.12 matches 10.15.28.12
- 10.15.28.12* matches anything that contains 10.15.28.12, such as 10.15.28.12, 10.15.28.120, 10.15.28.121, 210.15.28.12, 210.15.28.125
Procedure
On the REPORTS menu, under either the Realtime or Logs submenu, click Web filter.
- To export web filtering activity, select and filter the log data that you want export and click Export.
- To stop or start monitoring information in real time, click Realtime.
- To view details for a specific duration, click the date and time picker, specify when to search from, and click Apply.
- To get a closer look at what is happening at a specific time, find that time in the graph and click it. The real-time display stops and shows what has been logged at the time you clicked on.
- To change the log view, click Advanced » and clear or select an option to hide or show the columns of the results table.
- To filter the table by a criterion, enter the value in the column head and the table only shows rows with that criterion. For example, to see if a site is blocked, enter the URL to filter the results table.
- If the URL is blocked by a policy, you can click the policy link that takes you to view the policy details.
- To view search terms used from an address, enter an originating Source IP address. Click the down arrow and select Exact match to only search for the IP address specified. You can also enter a subnet range to search for, for example, 192.168.0.1/24.