Kerio Tech Firewall6 User Manual

Page 279

Advertising
background image

21.7 Users’ Activity

279

The header informs about the total number of visited web pages in the selected period

and the total number of web searches. WinRoute treats a HTTP request as a search if its

URL meets certain criteria. Most of top-used search engines is detected correctly.

Each record of connection to a web page includes:

Start time and duration (see above).

Domain to which the page belongs (statistics in StaR are created by domains —

see e.g. chapter

21.9

).

Number of visits — the number says how many times the page was visited within

this activity.

Web category — classification by the ISS OrangeWeb Filter module (see chap-

ter

12.4

). If ISS OrangeWeb Filter is not running or classification failed, category

will not be displayed.

Page title. Page title is displayed as a link — it is possible to simply click on the

link to open the page in a new window (or a new tab) of the browser. If the page

has no title, it will not be included in the activity list.

Connections to secured pages (HTTPS) are encrypted; therefore, titles and URLs of these

pages cannot be recognized. In these cases, the record includes only the following infor-

mation:

Name (or IP address) of the server.

Protocol (HTTPS).

Volume of data transferred in each direction.

The search record includes:

Search engine (only domain).

Searched string. The searched string is displayed as a link which can be clicked

to perform the corresponding search in the relevant search engine and to view

the search results in a new window (or a new tab) of the browser.

Messaging

This category covers two types of activity: email communication (by SMTP, IMAP and

POP3 protocols) and Instant Messaging — services such as ICQ, AOL Instant Messenger

(AIM), Yahoo! Messenger, MSN Messenger, etc.

Figure 21.19

User’s Activity — email and Instant Messaging

Advertising