Print

Please login or register.
1 Hour 1 Day 1 Week 1 Month Forever
Login with username, password and session length

[lingnau]

Hello.
I've been using DFL hardware for a long time and need to ask you guys a question.

I need to setup a few computers to have internet access with full internet access log, in other words:

1. I need to authenticate the computer user every time someone tries to access something. (Thant should be easy, I'm planning to authenticate against Active Directory).
2. I need to log the URLs requested by each user.(Maybe using syslog or snmp, need help here)

Is there a way (Has someone acomplished this) using DFL series firewall, or isn't it possible?

I'm using a DFL-800. Can it be done, or should I be searching for another solution (SQUID?).

[danilovav]

1. Refer manual for example, it's not difficult. Last days this forum had a topic about it, try to find.

2. Some ways are possible
- by using HTTP ALG, DFL will send URLs requested (of cource, only thru HTTP - without encryption) via syslog. You can parse and store it. By this way i've made some traffic accounting tool
- you can make transparent proxy (ex, squid, ISA or KWF) and get statistics from it
- you can mirror LAN port between network and DFL and use some network analyzer
IMHO, 1st way is most simple to implement, expecially if you dont need traffic stats (URL is enouth)

[lingnau]

1. Refer manual for example, it's not difficult. Last days this forum had a topic about it, try to find.

2. Some ways are possible
- by using HTTP ALG, DFL will send URLs requested (of cource, only thru HTTP - without encryption) via syslog. You can parse and store it. By this way i've made some traffic accounting tool
- you can make transparent proxy (ex, squid, ISA or KWF) and get statistics from it
- you can mirror LAN port between network and DFL and use some network analyzer
IMHO, 1st way is most simple to implement, expecially if you dont need traffic stats (URL is enouth)

Any recommendation of syslog server software?

[danilovav]

Dont know, i've made it by myself
I know kiwi syslog, try to use it