IAP-105 + users logs

[Boxcar]

Hi,

Sorry for this stupid question but is it possible to log users activity on an IAP-105 ?

Syslog is only for system logs right ? It's not logging users activity ?

Regards

Dimitri

[kdisc98]

Hi
Good morning.
You may use AirWave.
connect your InstantAp unit to an AirWave server
------------------------------------------------------------------
Airwave would provide you this sort of historic logging. You could then search by the mac address or IP address. If the user authenticated (thus providing a username) the username would be displayed. I recommend this if you are managing plenty of APs.

Have a lovely day.

me

[Boxcar]

My IAPs are allready connected to Airwave, I can see users but I'd like to know on which site they are surfing and to log this (as security in case of bad use of the network).

Can I still do this in Airwave ?

Thanks.

Dimitri

[kdisc98]

Nope.

[Boxcar]

Ok and is there an other way to do it ?

[kdisc98]

Via your gateway|WAN firewall soultion - 3rd party soultion
somthing like:
nTop - might do it.
http://www.ntop.org/products/ntop/

[Boxcar]

Thanks but just to sum up and be sure of having right understand what you said :

- I need a third part solution to log users activity.

- I can't log activity of users on IAP-105.

- If I deploy IAP-105s by a customer, I can't log the activity of the AP if I doesn't have gateway|WAN firewall solution.

To explain a more bit about the project : I need to deploy sevral IAP by diffrent customers, they all use my CP Guest server to create new users and login. But for security, I must log users activity (to retrieve, in case of problems, who surfs on which websites).

[kdisc98 · Accepted solution]

As far as i aware - you should solve it via your GW/WAN Router firewall or the ISP u are working in front of him.

u also can consider the using of proxy - and then all the users web traffic will be passing trough that proxy - and you will be able to log it.

Again - everything is 3rd party solution.

Me

[Boxcar]

Thanks, it's more clear for me now.

Dimitri

[clembo]

As kdisc98 has mentioned, third party proxies/filters are your best bet for comprehensive monitoring/logging; but without them, you can still use syslog to monitor user traffic, so long as you have configured the corresponding firewall rule to 'log' traffic.  See image below: