Tek-Tips is the largest IT community on the Internet today!

Members share and learn making Tek-Tips Forums the best source of peer-reviewed technical information on the Internet!

  • Congratulations Mike Lewis on being selected by the Tek-Tips community for having the most helpful posts in the forums last week. Way to Go!

View actual URL requests in ASDM

Status
Not open for further replies.

snootalope

IS-IT--Management
Jun 28, 2001
1,706
US
Curious if it's possible to see the actual URL requests on an ASA of data coming from internal IP to external addresses. I can obviously see the internal IP accessing the external IP and reverse lookup the external side to just see what the DNS resolves to. That helps a little, but not very much. I need to see what is actually being accessed on the external side, like the actual URL that is being hit. Is this doable on the ASA or am I going to need some proxy between the internal host and the ASA?
 
You can set up NetFlow on the ASA and export the data to a NetFlow collector and then see what IP addresses are being accessed and from where, however I don't think you can see the actual URLs. You can use an external WEBSense or Secure Computing SmartFilter server to provide URL filtering (which I assume will also give you pretty good reporting including URLs?) but this is another piece of software or external service.
You could place your own Proxy inside, restrict access on the ASA to only allow HTTP/HTTPS from the proxy and then direct your client browsers to it (or a transparent Proxy inline?) and then get statistics from the Proxy?

Andy
 
Status
Not open for further replies.

Part and Inventory Search

Sponsor

Back
Top