View actual URL requests in ASDM

[snootalope]

Curious if it's possible to see the actual URL requests on an ASA of data coming from internal IP to external addresses. I can obviously see the internal IP accessing the external IP and reverse lookup the external side to just see what the DNS resolves to. That helps a little, but not very much. I need to see what is actually being accessed on the external side, like the actual URL that is being hit. Is this doable on the ASA or am I going to need some proxy between the internal host and the ASA?

 

[ADB100]

You can set up NetFlow on the ASA and export the data to a NetFlow collector and then see what IP addresses are being accessed and from where, however I don't think you can see the actual URLs. You can use an external WEBSense or Secure Computing SmartFilter server to provide URL filtering (which I assume will also give you pretty good reporting including URLs?) but this is another piece of software or external service.
You could place your own Proxy inside, restrict access on the ASA to only allow HTTP/HTTPS from the proxy and then direct your client browsers to it (or a transparent Proxy inline?) and then get statistics from the Proxy?

Andy