Guest User!

You are not Sophos Staff.

Thread Info
  • State Not Answered
  • Locked Locked
  • Replies 3 replies
  • Subscribers 2 subscribers
  • Views 2979 views
  • Users 0 members are here
Options
Suggested
This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Web Protection -> Web usage report show ip instead of host

ntoupin
Hi,

On the web usage report (Logging & Reporting -> Web Protection -> Web Usage Report) how can I have the IP show up for clients instead of the hostname or is there a way to dig into that hostname from there to find the IP?

Example: I have a high usage of a hostname "iphone.domain.com" but can't find where to get the IP address associated with that hostname to get more info on the device.


This thread was automatically locked due to age.
Parents Reply Children
  • 0 in reply to Scott_Klassen
    Is something on your network hitting "iphone.domain.com" or is "iphone.domain.com" on your network showing a lot of usage?

    Which report are you looking at?  On the upper right, there should be a list of selections.  The default is "Sites".  Try "Users with URLs".  That should give you a listing for who/what is hitting that domain.

    Also, if the UTM is showing "iphone.domain.com" then that means the ip address it logged was resolvable by whatever DNS forwarders and/or request routing configuration you have set up.  To find the ip address, ping the name from a workstation.

    As for getting the reports to show ip addresses, I'm not sure.  I'll let someone else take a crack at that one.




    Hi,

    iphone was using a lot of resources.  The firewall can see ip's reguarly, just on that report it only shows "users" and uses the dns host if users aren't available.  

    Do a DNS lookup  Support > Tools > DNS Lookup


    Works like a charm, thanks.
Share Feedback
×

Submitted a Tech Support Case lately from the Support Portal?