Windows issues following Core Agent 2.7.6 and Intercept X 2.0.17 update. See KBA 135504 for more information.
The Sophos UTM Web Protection module automatically stores the Search Engine queries performed by users. This article describes how to view this data. The following sections are covered:
Applies to the following Sophos products and versions Sophos UTM Software Appliance v9.309
Most search engines (including Google) now secure searches with HTTPs to ensure privacy of data. In order to report on search data the Sophos UTM must be configured to scan inside this HTTPS traffic.
Note: To avoid browser warnings and compatibility issues, we recommend deploying the Sophos UTM Certificate Authority to your user's browser before enabling HTTPS scanning. For more information see article 115315
Search data is available in Logging & Reporting > Web Protection > Search Engine Report. By default the report will show an ordered list of search strings used today. The list can also be sorted by the number of Requests.
Clicking any of the results allow you to drill-down into the report. For example, to see which users made the query:
You can also manually filter the report using the green plus This allows you to create your own filter, for example, based on user:
To search for a specific term, use the options in Logging & Reporting > View Log Files > Search Log Files. Select the Web Filtering log. You can now search for a specific keyword. You can optionally also filter on user, source IP, etc..
The results will display any log entries where a user searched for the specified term.
If you've spotted an error or would like to provide feedback on this article, please use the section below to rate and comment on the article. This is invaluable to us to ensure that we continually strive to give our customers the best information possible.
Every comment submitted here is read (by a human) but we do not reply to specific technical questions. For technical support post a question to the community. Or click here for new feature/product improvements. Alternatively for paid/licensed products open a support ticket.