how to check which user is browsing which web sites??
-
Dear All
I am using pfSense 2.3.5. I want to see of my users browsing details through pfSence.Thus it possible through pfsense. if not, then how can I able to check of my users browsing details -
About all you could do is use Packet Capture to log all web site accesses, which would include the IP address of the computer used. There is nothing in web access that has a user ID, other than when they actually log in. Getting that info would require deep packet inspection, which would not be possible with https. There may be software available which would be better able to log those connections than Packet Capture. For example, Packet Capture can capture http or https, but not both at the same time.
-
You can install Squid and force all users to use it. Enable logging and then use Lightsquid to view the usage logs.
But if you attempt that you should do it in 2.4.4 not 2.3.5 which is unsupported.
See: https://youtu.be/xm_wEezrWf4
Steve
-
@sssom Got to say your quest seems or appears to be a breach of privacy!
-
@JKnott could you please any software name which definitely should be a open source software.
-
Sorry, that's not my area of expertise.
-
Using netflows via softflowd and some external flow analyser might be better:
https://docs.netgate.com/pfsense/en/latest/monitoring/exporting-netflow-with-softflowd.htmlIf you don't want to use Squid with full SSL intercept that is.
Steve
-
@stephenw10 My current pfsense is not running on squid. Can I force it to squid now or thus I need to install a fresh one?? Thus it really require to write the rule to pass all the data through squid??
-
Squid is a package you install in pfSense to proxy and log http/s traffic.
https://docs.netgate.com/pfsense/en/latest/cache-proxy/index.html#squidIf you watch the video I linked above it walks through the entire process.
Steve