Logging

WebSENSE Configuration

Screening | Custom URLs | Workstations ] Messages Registration | Control ] About WebSENSE

Logging ij

- Proxy Activity

Screening | Custom URLs | Workstations ] Messages Registration | Control ] About WebSENSE

Logging ij

- Proxy Activity

FTP

Gopher HTTP HTTPS

IRC

NNTP

RA

Telnet

Source Addr:

F

F

F

F

I?

F

I?

F

Dest Addr:

F

F

F

F

I?

F

F

F

Dest. Host

F

F

F

F

F

F

F

F

Bytes:

F

F

F

F

F

F

F

F

Duration:

F

F

F

W

I?

F

F

F

Full Url:

F

F

F

w

F

F

F

F

- Prevented Requests-

|7i Source IP Addr. P Protocol pi Dest. IP Addr. P Category PI Dest. Hostname pFullUrl

Observed Requests-

Source IP Addr. P Protocol P Dest. IP Addr. P Category P Dest. Hostname pFullUrl

- Prevented Requests-

|7i Source IP Addr. P Protocol pi Dest. IP Addr. P Category PI Dest. Hostname pFullUrl

Observed Requests-

Source IP Addr. P Protocol P Dest. IP Addr. P Category P Dest. Hostname pFullUrl

-Options-

Resolve Source Host Names m

^J Lance I j Apply j

©2000, Cisco Systems,

WebSENSE enables you to log URL requests. Specifically, use the Logging tab to specify whether you want to log information for prevented requests (requests for blocked URLs), observed requests (requests for URLs that are normally blocked, but have been made accessible), or both. You can also choose exactly which elements of the Internet request you want to log.

There are four frames within the Logging tab:

■ Proxy Activity—Enables you to log attempted access-restricted proxies by source address, destination address, destination host, and bytes.

■ Prevented Requests—Enables you to log attempted access to sites blocked by WebSENSE.

■ Observed Request—Enables you to log access to sites that are contained in the WebSENSE database, but were not set up for blocking at the time of the request.

■ Options—Enables you to change how logging is performed. If the Resolve Source Host Names checkbox is selected, WebSENSE performs a reverse IP address lookup and logs the workstation's domain name as well as the IP address.

WebSENSE writes log entries to a text file called WebSENSEstats.log, located in the WebSENSE directory. The WebSENSE Reporter imports these logs and produces reports in graphical or tabular formats.

Control Tab

©2000, Cisco Systems,

©2000, Cisco Systems,

The Control tab lists the version of the Master Database that is currently running and allows you to choose the day and time when WebSENSE will download the latest Master Database version. By default, WebSENSE contacts the Master Database, at the WebSENSE corporate headquarters, every day via the Internet to download the latest version.

Note The WebSENSE preference sets that you configure are never deleted when the new version of the Master Database is downloaded.

There are three frames within the Control tab:

■ Server Status Running—Contains the server port information for WebSENSE corporate headquarters, and enables you to start and stop the server.

■ Database Information—Displays the version of the Master Database that is currently running.

■ Database Update Preference—Enables you to set the time period each day during which WebSENSE will contact the Master Database for download.

WebSENSE chooses a random time during the time interval specified in the Update between boxes within the Database Update Preferences frame to attempt the download of the latest Master Database. If WebSENSE is unable to contact the Master Database at the scheduled time, it will retry every 10 minutes during the specified times until a new copy of the Master Database is successfully downloaded. If a Master Database download is unsuccessful, the Dated field is not updated.

You can set your own date and time for WebSENSE to download the latest Master Database by setting the parameters in the Database Update Preferences frame. You can also download the Master Database at any time by clicking the Now button in the Database Update Preferences frame.

0 0

Post a comment