Cisco Cisco Web Security Appliance S670 Installation Guide

Websites by Location

This example demonstrates how a system administrator would investigate a particular user at a company.  
In this scenario, a manager has received a complaint that an employee is visiting inappropriate web sites 
at work. To investigate this, the system administrator now needs to look at the employee’s web usage 
trends and transaction history: 

URL Categories by Total Transactions

Trend by Total Transactions

URL Categories Matched

Domains Matched

Applications Matched

Malware Threats Detected

Policies Matched for a particular User ID or Client IP. 

Using these reports, the system administrator can discover whether, for example, user “johndoe” was 
trying to access blocked URLs, which can be viewed in the Transactions Blocked column under the 
Domains section.

Select Users from the Cisco WSA Advanced Reporting dropdown menu.

Click on the User ID or Client IP address. 

If you do not see the User ID or Client IP address you want to investigate in the Users table, click on any 
User ID or Client IP.  Then search for all or part of the User ID or Client IP address. 

(Optional) Select Actions > Print. 

Select Web Tracking from the Cisco WSA Advanced Reporting dropdown menu. 

Search for the User/Client IP Address.

Click Pick fields above the transaction list to change the information displayed for each transaction.