URL history for an employee

Chaospinhead

I run Dimension for logging only. I have a customer that wants a report on all URL's visited for an employee. I cannot for the life of me figure out how to pull that report. I can get reports for top level domains in all sorts of manners but nothing that gives detail on each full URL like every single page visited. Is this not tracked anywhere?

Years ago and I do mean years I pulled a report once that listed every single site a person visited, it was huge. I know it was from Watchguard I thought dimension but I cant find it now.

Bruce_Briggs

Assuming that you have HTTPS Inspect enabled, and Logging for Reports selected for the HTTP & HTTPS proxy:

Dimension -> Per Client Reports
Enter the user name if this is for an authenticated user or an IP addr of the user workstation.
Click UPDATE, and get a URL detail list for the dates/times selected at the top right of the Dimension screen.

Chaospinhead

Thanks Bruce...I realize now that in the per client report I pulled that the HTTP entries show the URL path and all the HTTPS entries show certificate information. I guess I really need to get this setup and working.

Bruce_Briggs

You will need to install the cert from the firewall or from a local Certificate Authority on local PCs in order to do Inspect.
It can be done via AD GPO.

Use Certificates with Outbound HTTPS Proxy Content Inspection
https://www.watchguard.com/help/docs/help-center/en-US/Content/en-US/Fireware/certificates/cert_https_proxy_resign_c.html

About the HTTPS-Proxy
https://www.watchguard.com/help/docs/help-center/en-US/Content/en-US/Fireware/proxies/https/https_proxy_about_c.html

You also may need to add Allow exceptions for various sites which don't work with Inspect.

You could create a specific HTTPS proxy for just this user, if desired.

And note that access to a single URL may result in many behind the scene accesses to embedded content, all of which will be logged.