Hi Everyone
I want to see if my employees they access to facebook, i have configure WEBPROXY in RouterOS and install Web Proxy Log to analyze the log of webproxy but i see only http website access and not https
Is there a solution to see if my employees access to facebook?
Attend your reply, thanks.
ROS Web proxy can work only with http traffic.
Ok is there are other method for see if a client on the network access ok facebook?
There’s a method of using L7 bits and pieces that can aid you to write FW filter rule. It’s been shown how to deal with https headers in this forum (search around and you’ll find it). If you only want to observe, you could create a “chain=forward action=log” filter which will log a few data about connection.
Hi
thanks for your reply, sorry but i am new and speack little english
Can you explain with example of both methods you said…
I said Facebook but my finally goal is see the website access both http and https from a client, I do not know if I explained myself?
The Idea Of Using encrypted To Have Security the max you can do is to block facebook you cant see more then that so don’t bother your self by searching there is no way to monitor any secure connections https
Well, a better proxy can handle CONNECT commands and it can log the hostname the client connects, but RouterOS cannot do that as mrz already explained.
You would have to setup an additional computer with e.g. squid as a proxy.
However before you do that, please note: such a proxy can NOT operate as a transparent proxy that everyone automatically uses.
It has to be configured in everyone’s computer, phone, etc.
Instead, you can better talk to your employees and discuss acceptable use of the internet during work hours. That will work better in the long run
and it will save you a lot of effort and frustration.