Client and Log Issue

RouterOS Beginner Basics
1

Dear All

Please how do you view what website a user/client has visited. From the cache i can only see what websites all the client has visited i like to narrow this down so as to trace and diagnose security threats in my clients network

Secondly how do you view the log for the past month or year

Thanks

Azeez

2

Please i need a reply

3

The built in tools are badly suited for this. Look up the wiki manual for a transparent proxy, so that you proxy all web traffic (you can only proxy HTTP transparently, for HTTPS to work you have to reconfigure all user browsers to explicitly use the proxy). Then turn on logging of the proxy topic (the the “system logging” wiki manual). Then log all proxy logs to a remote syslog server and use whatever software of your choice to sort, archive, and search the log files.

You can also search the forums. This questions gets asked on a weekly basis.

4

Have you tried proxylizer? Or use remote action log to send information to another syslog server.

5

Thanks All

Will work on that

6

don’t forget about DNS, DNS service mikrotik for clients, you can see on cache the website have been opened. :slight_smile: