How to check websites that were visited by users
Symptom
Looking for a way to see the websites that are been browsed for the users in order to take action on wether to block them or not.
Environment
Any PanOS
Resolution
In order to accomplish the desired we can follow the below steps:
The User Activity Report has:
- Browsing Summary by Category
- Browsing Summary by Website
- Detailed Web Browsing Activity
In order for the report to display the above, a URL filtering Profile must be created using the alert option in the required categories. This will allow users to access the desired category, for example you can set news and media to alert , the users would not be alerted while he/she goes to any news website , but the firewall will start logging in URL logs and hence User activity report.
Additional Information
The Palo Alto Networks products will only log URLs visited in the reports if you have the "action" under the URL filtering profile(s) set to "alert" "block" continue" or "override".
Palo Alto does not log on the "allow" action.
________________________________________________________________________________________________
You can also follow this LIVEcommunity article:
https://live.paloaltonetworks.com/t5/general-topics/is-there-any-way-to-get-the-sites-visited-in-the-quot-user/td-p/3485