Skip to main content

Hello,

 

I am trying to figure out the best way to query/view all allowed web traffic for a user or users. 

 

I found this posted:
--
By default, we do not log allowed traffic. If traffic is blocked, it is logged, and you can view that traffic under Skope-IT  alerts. If you wish to log allowed web traffic, you do not need to create a new policy; simply change the action of the existing policy to 'alert' to log all traffic matching that specific policy
--
 

But when we enabled alerting it shows a lot of activities for the allowed traffic but not all of the typical browsing traffic. Is this viewable in the Tennant? ie: if someone just goes to a typical website and clicks around.. It does not seem to just log that browse action. 

 

Thanks

It seems you would like to see the raw (proxy) logs. Do you have Advanced Analytics enabled as this is where that would show up (and of course through log streaming of raw logs).


Reply