Cisco Support Community
cancel
Showing results for 
Search instead for 
Did you mean: 
Announcements

Welcome to Cisco Support Community. We would love to have your feedback.

For an introduction to the new site, click here. If you'd prefer to explore, try our test area to get started. And see here for current known issues.

New Member

How to monitor Internet usage (web) with PIX installed

Hello all,

I am hoping you could recommend an appropriate solution for the following situation:

I have a customer who would like be able to occasionally monitor how his staff uses the Internet - basically which sites they are visiting and how much time they spend on these sites... no detailed reports would be required, just occasional monitoring. Obviously, their PIX 501 would have to be the source of the information.. I am assuming there would be an application out there (commercial or freeware) that would collect & analyze related PIX logs and translate them into an easily understandable form and advise of Web usage.

Any recommendations / advice will be MUCH apprechiated!

Thanks in advance,

Sean

  • Other Security Subjects
1 ACCEPTED SOLUTION

Accepted Solutions
New Member

Re: How to monitor Internet usage (web) with PIX installed

It does resolve the DNS and it links out to WHOIS Database from the reports to resolve outside IPs, you can set how long to keep the DNS Cache TTL (helpdful with internal DHCP clients). If you go to the web site they show a sample On Demand report. You can customize the reports to show specific traffic/events. Also you can analyze traffic for individual IPs and each report has links to explain the Syslog events. You can have the report emailed on a schedule basis.

4 REPLIES
New Member

Re: How to monitor Internet usage (web) with PIX installed

I use FIREGEN FOR PIX LOG ANALYZER http://www.eventid.net/firegen/firegenpix2.asp

I beleive there is a 30 day evaluation copy at their site, found it works best in conjuntion with KIWI syslogd.

New Member

Re: How to monitor Internet usage (web) with PIX installed

Thank you for you reply.

Does this program actually resolve IP addresses to the corresponding DNS names (so that the person monitoring the traffic can see which websites have been / are being visited that day..)

New Member

Re: How to monitor Internet usage (web) with PIX installed

It does resolve the DNS and it links out to WHOIS Database from the reports to resolve outside IPs, you can set how long to keep the DNS Cache TTL (helpdful with internal DHCP clients). If you go to the web site they show a sample On Demand report. You can customize the reports to show specific traffic/events. Also you can analyze traffic for individual IPs and each report has links to explain the Syslog events. You can have the report emailed on a schedule basis.

New Member

Re: How to monitor Internet usage (web) with PIX installed

Thank you for your help!!

126
Views
5
Helpful
4
Replies
This widget could not be displayed.