Google query string

[howartp]

Hi,

I'm currently trialling Wingate, but I have a query.

I know one of my users is viewing objectionable material on my network. I've restricted his access to the sites I know he uses, but the logs only show me the domain name plus directory - they don't show the page and query string at the end. (The filters on this forum are preventing me saying which site I'm referring to, but it's the common search engine beginning with 'G')

Is it possible to get the logs to show the full URL including query string so I can see what he is searching for?

Don't worry about all the "you should ban him all together if he's doing this" issues, I'm working on them.

Thanks,

Peter.

[Nev]

Don't worry about all the "you should ban him all together if he's doing this" issues, I'm working on them.

Thanks,

Peter.

Hi,

Not at all, any access breach is just a management policy which Wingate does with ease.

Now is the user a 'NAT' connection?

If so, try turning on Transparent Connection in the WWW Proxy.

Does this help?

[adrien]

Hi

logs should already show the full URL, but not query string, since that's normally the result of a form submission, and deemed private / sensitive data.

Adrien

[howartp]

Now is the user a 'NAT' connection?

If so, try turning on Transparent Connection in the WWW Proxy.

Does this help?

How would I know if the user is a NAT connection? My users are set per machine (static IP) so any usage from 192.168.x.y1 is assigned to user1, from 192.168.x.y2 assigned to user2, etc as the machines are all personal machines within the network. Rarely does anyone use anyone elses PC. I have then filtered user2, so they can access all content unless "HTTP URL" contains blah, blah2 or blah3. However, they are then searching for some other term, say blah4, which gives similar results.

This is why I'm trying to find out the query strings - website/search.php?string=blah4.

Sorry I didn't respond sooner; I was expecting to be notified when anyone posted a reply, but either I didn't receive one or it was blocked by my spam. I just remembered whilst looking through the logs tonight that I had posted here.

Peter

[jamesc]

How would I know if the user is a NAT connection?

--> It will say it in the Activity tab:



Reference: WinGate Help File --> WinGate Installed Components --> GateKeeper --> GateKeeper Activity Icons.


Regarding the Objectionable content, have you considered evaluating the PureSight Plugin? http://www.wingate.com/download.php

[howartp]

Hi James,

The user is 'Assumed'.

However, I like the look of puresight.

I've installed the trial - I'll see how it goes.

Thanks.