I have a PIX 515. I want to be able to generate reports of folks web usage. I put the PIX in debug mode and capture the logs with kiwilogger and then try analysis with Sawmill. But when I select source ip and then Top URL i get no data. Sawmill says:
"The logs that you are using contain no URL data therefore Sawmill can
not show you a list of sites accessed. You will need to enable
"Accessed URL" logging (i.e. the option that causes accessed URL lines
to be logged; we are unsure what this option is called because we are
not familiar with the PIX administrative interface) on your PIX
firewall in the logging options before this information can be reported."
I see that few have looked at your posting, so I will take a stab at it. Sounds like you are not logging the correct level. The pix can send messages to the syslog based on levels. I think that you have to have Level 6 (info) to get URL's
BenefitsDocumentationPrerequisiteImage Download LinksLimitationsSupported PlatformsLicense RequirementsTopologyStep-By-Step ConfigurationConfigure Virtual ServiceActivate the virtual service and configure guest IPsConfiguring UTD (Service Plane)Configurin...
Login to the FXOS chassis manager.
Direct your browser to https://hostname/, and log-in using the user-name and password.
Go to Help > About and check the current version:
Check the current version availa...
We have configured the outside and inside Interface with official ipv6 adresses, set a default route on outside Interface to our router, we also have definied a rule , which also gets hits, to permit tcp from inside Interface to any6.
In Syslog I also se...