Thread Info
  • State Not Answered
  • Locked Locked
  • Replies 5 replies
  • Subscribers 2 subscribers
  • Views 12343 views
  • Users 0 members are here
Options
Suggested
This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Where to check the Website accessing log for Domain PC

sanjayyadav

Hi Guys,

Someone from my Domain has access the website, which was not permitted to allowed. I have the Date and excate time and my External IP of the my Office domain.


I tried to check the reverse Proxy log but didnt Find Any entry related to my issue. I wanna know who has browsed that particular Website.I have Sophos Firewall and As well Sophos Endpoint Protection.


my office computers are being used as Shared workstations for Multiple Users.

Thanks,



This thread was automatically locked due to age.
Parents
  • 0

    Hi, Sanjay, and welcome to the UTM Community!

    I think you haven't gotten an answer because it's not clear if you're saying the access came from inside or outside or whether the server in question is inside or outside.

    Cheers - Bob

    PS Should this thread be moved to the Webserver Protection forum?

     
    Sophos UTM Community Moderator
    Sophos Certified Architect - UTM
    Sophos Certified Engineer - XG
    Gold Solution Partner since 2005
    MediaSoft, Inc. USA
  • 0 in reply to BAlfson

    Hi Bob,

    you are right , i didn't clear myself in my post. so the Thing is , I have Domain and All the Computer are Routed through Office Interface and later on the External Interface IP address.

    my Traffic came from Inside and accessed Outside Server , which is Hosted to the third Party Location.(Where my Website is running.)

    So I got the HTTP Log from the Third Party that my External Office IP Accessed their server at 17:31:22 time but i dont find that Entry in the Packetfilterlog,and also not in the reverse Proxy Log.

    I have also IP from Internal Two PC which is inside my Network , but i dont see any Log that which IP was Accessing the Outside Webserver. not Log Entry was Created , or i didnt find so far.

    Thanks for your reply.

  • 0 in reply to sanjayyadav

    I think you want the Web Filtering log.

    Cheers - Bob

     
    Sophos UTM Community Moderator
    Sophos Certified Architect - UTM
    Sophos Certified Engineer - XG
    Gold Solution Partner since 2005
    MediaSoft, Inc. USA
  • 0 in reply to BAlfson

    Hey Bob,

    Thanks, you are Right. I have also checked that Logged but Figured out that Logging for the Office Lan is not configured so there is not Log entry for that day. I am now looking for a way to configure the Logging for Office Subnet , where all domain PC's are Having the Internet access. Can you Please Provide some Tips for that, i am also thinking to move this Thread now to the Web filtring Forum

    Thank you so much

Reply
  • 0 in reply to BAlfson

    Hey Bob,

    Thanks, you are Right. I have also checked that Logged but Figured out that Logging for the Office Lan is not configured so there is not Log entry for that day. I am now looking for a way to configure the Logging for Office Subnet , where all domain PC's are Having the Internet access. Can you Please Provide some Tips for that, i am also thinking to move this Thread now to the Web filtring Forum

    Thank you so much

Children
Unfiltered HTML