Netgate SG-1000 microFirewall

Author Topic: how to monitor users  (Read 534 times)

0 Members and 1 Guest are viewing this topic.

Offline abdallhsamy

  • Newbie
  • *
  • Posts: 14
  • Karma: +0/-0
    • View Profile
how to monitor users
« on: September 10, 2017, 10:41:50 am »
I want to monitor user per user not per IP
and want to know what are they doing on their devices ?

Offline luckman212

  • Hero Member
  • *****
  • Posts: 726
  • Karma: +59/-0
    • View Profile
    • @luckman212 - github
Re: how to monitor users
« Reply #1 on: September 29, 2017, 10:42:08 pm »
No need for fancy tools for that. Let me save you some time, I can tell you what they're doing... Facebook, Instagram, Snapchat, YouTube, Netflix, YouPorn...........................  ;)

Just block everything and then whitelist what you want to allow them to access and call it a day. Trying to monitor is (mostly) a lost cause now that everything is HTTPS. 

Some starting points, check out pfBlockerNG, and https://doc.pfsense.org/index.php/Blocking_websites

« Last Edit: September 30, 2017, 06:51:27 am by luckman212 »

Offline cfapress

  • Newbie
  • *
  • Posts: 14
  • Karma: +0/-0
    • View Profile
Re: how to monitor users
« Reply #2 on: October 12, 2017, 11:18:39 am »
I use Squid as a transparent proxy and LightSquid for reporting web traffic. For other forms of traffic you can use ntopng though it's not intuitive. And both of these solutions are not per-user but rather per-device. If you need per-user monitoring you'll need to look at something installed on the client workstation.