Community discussions

MikroTik App
 
dexter23
just joined
Topic Author
Posts: 3
Joined: Thu Jul 19, 2018 5:13 pm

PROXY HTTPS

Thu Jul 19, 2018 5:18 pm

Hi Everyone

I want to see if my employees they access to facebook, i have configure WEBPROXY in RouterOS and install Web Proxy Log to analyze the log of webproxy but i see only http website access and not https

Is there a solution to see if my employees access to facebook?

Attend your reply, thanks.
 
User avatar
mrz
MikroTik Support
MikroTik Support
Posts: 7056
Joined: Wed Feb 07, 2007 12:45 pm
Location: Latvia
Contact:

Re: PROXY HTTPS

Thu Jul 19, 2018 5:25 pm

ROS Web proxy can work only with http traffic.
 
dexter23
just joined
Topic Author
Posts: 3
Joined: Thu Jul 19, 2018 5:13 pm

Re: PROXY HTTPS

Thu Jul 19, 2018 5:37 pm

Ok is there are other method for see if a client on the network access ok facebook?
 
User avatar
mkx
Forum Guru
Forum Guru
Posts: 11627
Joined: Thu Mar 03, 2016 10:23 pm

Re: PROXY HTTPS

Thu Jul 19, 2018 6:04 pm

There's a method of using L7 bits and pieces that can aid you to write FW filter rule. It's been shown how to deal with https headers in this forum (search around and you'll find it). If you only want to observe, you could create a "chain=forward action=log" filter which will log a few data about connection.
 
dexter23
just joined
Topic Author
Posts: 3
Joined: Thu Jul 19, 2018 5:13 pm

Re: PROXY HTTPS

Thu Jul 19, 2018 6:27 pm

Hi

thanks for your reply, sorry but i am new and speack little english


Can you explain with example of both methods you said...

I said Facebook but my finally goal is see the website access both http and https from a client, I do not know if I explained myself?
 
User avatar
mohannad
Frequent Visitor
Frequent Visitor
Posts: 55
Joined: Wed May 02, 2012 2:39 am
Location: Lebanon
Contact:

Re: PROXY HTTPS

Sat Jul 21, 2018 1:09 pm

The Idea Of Using encrypted To Have Security the max you can do is to block facebook you cant see more then that so don't bother your self by searching there is no way to monitor any secure connections https
 
pe1chl
Forum Guru
Forum Guru
Posts: 10240
Joined: Mon Jun 08, 2015 12:09 pm

Re: PROXY HTTPS

Sat Jul 21, 2018 1:26 pm

Well, a better proxy can handle CONNECT commands and it can log the hostname the client connects, but RouterOS cannot do that as mrz already explained.
You would have to setup an additional computer with e.g. squid as a proxy.
However before you do that, please note: such a proxy can NOT operate as a transparent proxy that everyone automatically uses.
It has to be configured in everyone's computer, phone, etc.
Instead, you can better talk to your employees and discuss acceptable use of the internet during work hours. That will work better in the long run
and it will save you a lot of effort and frustration.

Who is online

Users browsing this forum: hazem, HeinoHomm and 186 guests