How can I centrally monitor users' browsing habits using a Sonicwall tz205, and running on a windows network?
I am looking for a report that will show me LAN user's ip address and websites/services that they visit/use.
How can I centrally monitor users' browsing habits using a Sonicwall tz205, and running on a windows network?
I am looking for a report that will show me LAN user's ip address and websites/services that they visit/use.
SonicWall/Dell solutions:
SonicWall makes two product, ViewPoint (included in the Comprehensive Security bundle license) and Analyzer, that aren't too expensive (~$200USD), and will do exactly what you wish in a very easy to use way.
If you don't want to invest, you may be licensed:
Take a look here: http://www.sonicwall.com/us/en/products/TZ_205.html#tab=resources
Referring to the administrators guide, interesting parts are:
Analyzing traffic flows might be of interest, but is much more robust/granular:
I use flow probe/generator (netflow/argus) and a free project called flow-inspector. This is not as simple as proxy logs.
Maybe watching DNS will help:
Not exactly what you were looking for, but monitoring DNS lookups is valuable. This can likely most easily be done by using something to parse logs produced by your DNS server.
Recommendation:
If you already haven't done so, I suggest restricting outgoing traffic by firewall policy, then filtering and tracking that traffic.