stats report to list in house ip address requesting domains

Currently stats tell us all about what domains were requested.

Can we get a list of in house IP addresses or some sort of identifier for the in house computer that is requesting each domain.

Realizing of course that dhcp can issue a new ip address, any information toward identifying the computer(s) requesting access to given domains would be an immense help in tracking down a variety of problems including but not limityed to:

Finding who is trying to access blocked accounts.

Tracking down a computer with a bot installed on it

Determining if the problem is an in house system or a personal computer brought in from the outside.

tracking down system abuses (such as high requests to streaming audio/video sites) by large numbers of computers.

cervezafria June 17, 2013 18:33

OpenDNS can only see your public IP. I doubt seriously you would really want to open your internal network to external processes.

Mark Dunkley June 17, 2013 18:59

We currently have an Internal Networks feature for our Insights product which can provide this granularity. This requires a Virtual Appliance to be deployed via ESXi. If you are interested in this for your enterprise setup, please contact sales (www.umbrella.com).

We do not have a solution for home users and will not be pursuing anything like this in the future as an intermediary device is required to gather the necessary information.

msdas June 17, 2013 19:10

Thank you for your help! I believe we can close this thread.

stats report to list in house ip address requesting domains

Comments

Didn't find what you were looking for?