NetFort Tips & Tricks - How to exclude Intranet sites and show only Internet sites

  • 1
  • Idea
  • Updated 3 years ago
A customer recently asked us if it was possible to filter out internal websites showing up in our Top Website Domains report. The answer is yes, it is possible. The customer in question was seeing a lot of internal websites showing up and wanted to filter them out of the report.

An example of some of the internal sites they would like to filter out of reports like Web :: Top Website Domains were 192.168.127.148 and netfort.com

There are two options on how to do this.

  1. Filter out by website name. Internal sites should be in the local domain so you might be able to set the "Website Domain Name" filter to something like "does not end in netfort.com" (or whatever the local domain is).
  2. Other option is to create a custom report from Top Website Domains and replace the "IP/Subnet" filter with 2 separate filters: "Source" and "Destination" then set the "Destination" to !192.168.0.0/16,172.16.0.0/12,10.0.0.0/8 (IPv4 address ranges for private networks)

The steps to create the custom report were as follows:

a) Click on Reports in the LANGuardian menu bar.

b) In the Web section, click on Top Website Domains

c) Click View.

d) When LANGuardian displays the report, click More Actions on the report menu bar and select Save Report.

e) Enter a name and description for the report, then Click Save. The new report will be listed in the Custom Reports section.

f) Then access the custom report -> View -> More Actions -> Edit. In your report syntax, you will see the expression {src,dst#ip#IP/Subnet#subnetdl#} appearing twice, replace both occurrences with the expression {src#src#Source#subnet}  & {dst#dst#Destination#subnet} and click Save.

If you have any questions about Web Activity Monitoring, or indeed any aspect of LANGuardian please contact us on support@netfort.com at any time.

You can view all archived tips & tricks emails on our community forum here.

Photo of Aisling Brennan

Aisling Brennan, Official Rep

  • 391 Posts
  • 8 Reply Likes

Posted 3 years ago

  • 1

Be the first to post a reply!