Loading Profile...
Twitter,
Facebook, or email.
EMPLOYEE
Help, how do I detect suspicious connections to external sites though your proxy?
How do I create a report which will show traffic flows from my network which use our proxy server to access external sites?
Official
Response
-
EMPLOYEE
I’m
happy
To set the report up please take the Web::Proxy Flows report as a base you will find it from the GUI:
Modules - Web - Advanced Reports - Proxy Flows (by IP)
In this report set up a filter in the parameter Website Name as follows:
!(\:8080|\:443|[a-z]|(\d+)\.(\d+)\.(\d+)\.(\d+))$
This should show you all accesses to servers not on ports 443 8080....
-
EMPLOYEE
I’m
happy
To set the report up please take the Web::Proxy Flows report as a base you will find it from the GUI:
Modules - Web - Advanced Reports - Proxy Flows (by IP)
In this report set up a filter in the parameter Website Name as follows:
!(\:8080|\:443|[a-z]|(\d+)\.(\d+)\.(\d+)\.(\d+))$
This should show you all accesses to servers not on ports 443 8080....Comment -
