sophos utm sg full url

For https sites, you have to implement https inspection (decrypt-and-scan) to see the full URL.   The host name is outside the encrypted part of the packet, so it can be logged, but the path and query string are in the encrypted portion.   I believe this is in the documentation somewhere.   UTM cannot report what it cannot see.

Select the 'Web Protection Reporting Detail Level' in 'Reporting Settings'.

The complete URL is always available in the Web Filtering log.

Does that answer your question?

Cheers - Bob