Announcement

Collapse
No announcement yet.

System tool to track websites visited across my domain

Collapse
X
  • Filter
  • Time
  • Show
Clear All
new posts

  • System tool to track websites visited across my domain

    Hi everyone - I did a couple searches for this, including google and I cannot find a suitable answer. So if I've created a repeat post, i'm truly sorry.

    I have a Cisco ASA 5510, and 2 Catalyst 2960 switches. I need to find out what sites are being visited on my network. I've tried the tools built in to the ASA, but it just gives me raw IPs... EVERY IP and I cannot just sit there and put in IPs all day. Is there a tool I can use that will allow me to find out what sites are being visited? Thanks in advanced!

  • #2
    Re: System tool to track websites visited across my domain

    Use ISA server.
    Marcel
    Technical Consultant
    Netherlands
    http://www.phetios.com
    http://blog.nessus.nl

    MCITP(EA, SA), MCSA/E 2003:Security, CCNA, SNAF, DCUCI, CCSA/E/E+ (R60), VCP4/5, NCDA, NCIE - SAN, NCIE - BR, EMCPE
    "No matter how secure, there is always the human factor."

    "Enjoy life today, tomorrow may never come."
    "If you're going through hell, keep going. ~Winston Churchill"

    Comment


    • #3
      Re: System tool to track websites visited across my domain

      I think ISA is a little overkill, we are a small business, a non profit.

      Comment


      • #4
        Re: System tool to track websites visited across my domain

        Well... I'm sure there's some way of scripting the process of dumping the IP addresses to a flat file, then consuming them via a Python script and using a bulk reverse DNS lookup, then categorizing, etc. and etc.. That would be totally free and not need any new pieces of equipment. However, it could be rather frail and also hinges on your ability to script and the amount of time you have to invest in the project.

        That brings me to my next suggestion: You could use a web proxy like Squid with it's many plugs ins. It would require a server to run on, but it doesn't have to be a juggernaut. A simple $400 Dell box would do nicely. Squid is open source and thus "free" (quotation marks are deliberate). You could also use IPCop as your firewall and look into its many plug ins and extra features.
        Wesley David
        LinkedIn | Careers 2.0
        -------------------------------
        Microsoft Certifications: MCSE 2003 | MCSA:Messaging 2003 | MCITP:EA, SA, EST | MCTS: a'plenty | MCDST
        Vendor Neutral Certifications: CWNA
        Blog: www.TheNubbyAdmin.com || Twitter: @Nonapeptide || GTalk, Reader and Google+: [email protected] || Skype: Wesley.Nonapeptide
        Goofy kitten avatar photo from Troy Snow: flickr.com/photos/troysnow/

        Comment


        • #5
          Re: System tool to track websites visited across my domain

          Well I don't know a lot of ASA but if you want some reporting about visited websites per user based etc then I would go for an ISA server.
          However, you might try to let ASA also do an domain lookup. Maybe it works.

          However most proxy servers (because this is what you actually need) don't do AD authentication.
          Without proper AD authentication, you won't see what user it was. Well, you'll might find out the client IP but with DHCP this is not reliable.
          Marcel
          Technical Consultant
          Netherlands
          http://www.phetios.com
          http://blog.nessus.nl

          MCITP(EA, SA), MCSA/E 2003:Security, CCNA, SNAF, DCUCI, CCSA/E/E+ (R60), VCP4/5, NCDA, NCIE - SAN, NCIE - BR, EMCPE
          "No matter how secure, there is always the human factor."

          "Enjoy life today, tomorrow may never come."
          "If you're going through hell, keep going. ~Winston Churchill"

          Comment


          • #6
            Re: System tool to track websites visited across my domain

            Apparently Squid can integrate with Active Directory.
            Wesley David
            LinkedIn | Careers 2.0
            -------------------------------
            Microsoft Certifications: MCSE 2003 | MCSA:Messaging 2003 | MCITP:EA, SA, EST | MCTS: a'plenty | MCDST
            Vendor Neutral Certifications: CWNA
            Blog: www.TheNubbyAdmin.com || Twitter: @Nonapeptide || GTalk, Reader and Google+: [email protected] || Skype: Wesley.Nonapeptide
            Goofy kitten avatar photo from Troy Snow: flickr.com/photos/troysnow/

            Comment


            • #7
              Re: System tool to track websites visited across my domain

              Sure, but what about reporting?

              Hmmm, there are some scripts out there:
              http://www.squid-cache.org/Scripts/
              Marcel
              Technical Consultant
              Netherlands
              http://www.phetios.com
              http://blog.nessus.nl

              MCITP(EA, SA), MCSA/E 2003:Security, CCNA, SNAF, DCUCI, CCSA/E/E+ (R60), VCP4/5, NCDA, NCIE - SAN, NCIE - BR, EMCPE
              "No matter how secure, there is always the human factor."

              "Enjoy life today, tomorrow may never come."
              "If you're going through hell, keep going. ~Winston Churchill"

              Comment


              • #8
                Re: System tool to track websites visited across my domain

                I'm looking into Squid... thanks! As I am the IT department... meaning I am Systems Admin, helpdesk and everything else in between, i do not have the time to script anything. Which is why I wanted a nice little tool that I could install and be done... Thanks for your help, I really do think a proxy is the way to go. I appreciate the extremely quick help! reps to you both... (when I figure out how to do that lol). I also need to get used to the forums being "backwards" I'm used to the newest reply last heh.

                Comment


                • #9
                  Re: System tool to track websites visited across my domain

                  hmmm I'm very new with Linux... I wonder if there is a good windows based proxy?

                  Comment


                  • #10
                    Re: System tool to track websites visited across my domain

                    Originally posted by leastcmplicated View Post
                    hmmm I'm very new with Linux... I wonder if there is a good windows based proxy?
                    None that I'm aware of... but of course that doesn't mean that there aren't any. You could get a Squid Virtual Appliance form the VMWare appliance library. That could be relatively painless and a nice way to start administering a first-time Linux box. For example: http://www.vmware.com/appliances/directory/57
                    Wesley David
                    LinkedIn | Careers 2.0
                    -------------------------------
                    Microsoft Certifications: MCSE 2003 | MCSA:Messaging 2003 | MCITP:EA, SA, EST | MCTS: a'plenty | MCDST
                    Vendor Neutral Certifications: CWNA
                    Blog: www.TheNubbyAdmin.com || Twitter: @Nonapeptide || GTalk, Reader and Google+: [email protected] || Skype: Wesley.Nonapeptide
                    Goofy kitten avatar photo from Troy Snow: flickr.com/photos/troysnow/

                    Comment


                    • #11
                      Re: System tool to track websites visited across my domain

                      Well I think you should think what's important for you....
                      Is it the logging?
                      Is it also which user accessed which site?

                      Make your wishlist first

                      And why scared for linux?

                      Edit:
                      Nonapeptide do i get any time to type a message?
                      Marcel
                      Technical Consultant
                      Netherlands
                      http://www.phetios.com
                      http://blog.nessus.nl

                      MCITP(EA, SA), MCSA/E 2003:Security, CCNA, SNAF, DCUCI, CCSA/E/E+ (R60), VCP4/5, NCDA, NCIE - SAN, NCIE - BR, EMCPE
                      "No matter how secure, there is always the human factor."

                      "Enjoy life today, tomorrow may never come."
                      "If you're going through hell, keep going. ~Winston Churchill"

                      Comment


                      • #12
                        Re: System tool to track websites visited across my domain

                        Found one!

                        Dumber: Sorry... I should really be calling VARs to spec out a new server but I'm not feeling like working today.
                        Wesley David
                        LinkedIn | Careers 2.0
                        -------------------------------
                        Microsoft Certifications: MCSE 2003 | MCSA:Messaging 2003 | MCITP:EA, SA, EST | MCTS: a'plenty | MCDST
                        Vendor Neutral Certifications: CWNA
                        Blog: www.TheNubbyAdmin.com || Twitter: @Nonapeptide || GTalk, Reader and Google+: [email protected] || Skype: Wesley.Nonapeptide
                        Goofy kitten avatar photo from Troy Snow: flickr.com/photos/troysnow/

                        Comment


                        • #13
                          Re: System tool to track websites visited across my domain

                          Damn, I found the same one!
                          You know what, I'm going to enjoy my evening
                          Marcel
                          Technical Consultant
                          Netherlands
                          http://www.phetios.com
                          http://blog.nessus.nl

                          MCITP(EA, SA), MCSA/E 2003:Security, CCNA, SNAF, DCUCI, CCSA/E/E+ (R60), VCP4/5, NCDA, NCIE - SAN, NCIE - BR, EMCPE
                          "No matter how secure, there is always the human factor."

                          "Enjoy life today, tomorrow may never come."
                          "If you're going through hell, keep going. ~Winston Churchill"

                          Comment


                          • #14
                            Re: System tool to track websites visited across my domain

                            Thanks guys, its not that i'm scared of Linux, its just that I really don't have the time to mess around with it right now.

                            Comment


                            • #15
                              Re: System tool to track websites visited across my domain

                              Thread moved to General Security.
                              Regards,
                              Jeremy

                              Network Consultant/Engineer
                              Baltimore - Washington area and beyond
                              www.gma-cpa.com

                              Comment

                              Working...
                              X