[ik1tara]

Hi,

I have a situation where i got a PC with internet connection, Users, each with their own User Id and Passwords (Generated with Squid) logs on to the internet (Not the system - System has a single user account).

I want to have a security tool that would list me the activity of every users individually filtered with their user id. The activity log that i'm looking for may comprise of Time Stamp, Sites visited, Data Files accessed from the system (Downloaded or Uploaded) on daily and/or monthly basis.

I'd be really thankful to you if you could help me find the solution. The running system has Win XP.

Regards,
ZM

 

[ik1tara]

an early response would be appreciated

 

[epshatto]

Hi there. I'm taking a stab that you might be looking for a business-class solution. If so, then Cisco has a web security gateway with a filtering policy set called Scansafe Scancenter, which I work with daily.

This is a cloud-based service for enterprises and is capable of working with Squid. You can set an ACL defined by rules and integrated to Active Directory/LDAP. Users get the rules applied based on AD membership you assign them and it allows you to run a variety of different types of activity reports. It'd pretty much cover everything you mentioned here.

You can get a look at configuring Scansafe with Squid at this site-
Third Party Integration  [Cisco Cloud Web Security] - Cisco Systems

Details would probably be worked out with the vendor.

 

[ik1tara]

Thanks for your reply...i should have mentioned earlier, i am looking for a free tool...and most preferably the one who works on client system instead of server.

looking forward to have your reply in it.

 

[epshatto]

I did a little digging and found a list of log analysis software that can work with Squid here-

squid : Optimising Web Delivery

You can review that list for something that fits your requirements. In particular I noticed Red Line's Internet Access Monitor-

Internet Access Monitor - Internet access monitoring software for WinGate, WinRoute, WinProxy, MS ISA Server, Squid, MS Proxy Server, Proxy+

That seems to show breakdowns of user access based on sites and time.

 

[ik1tara]

Thanks a lot for this help. Much appreciated.