Web Filter categories logging

[scottb]

When selecting categories to pass or block in Web Filter, can someone explain the difference between "pass" and "pass and log"? I can't find any difference in behavior where the Event Log or Reporting would show this?

I want to pass some specific categories but would like to know if my users are abusing their freedoms.

[mdh]

Passed sites go through with no mention in the Event log. Passed and logged web sites are passed (as the other is) but a mention is made in the log of their accessing the site.

[scottb]

So in the Event Log "All HTTP traffic" does not show passed sites? By your explanation, if every category was set to "Pass" then the Event Log would be empty.

I cannot see a difference in the Event Log between "All HTTP traffic" and "Passed HTTP traffic". Can you give me a scenario to try that would show me a difference? And likewise give me a scenario where I hit a website but it DOESN'T show up in the Event Log?

[mdh]

Sorry...cranial flatulence!

All HTTP traffic will show all traffic, whether it was blocked or not, and if so, why.

Whitelisted traffic will show only that traffic that is on your pass list.

Passed HTTP will show all traffic that was passed, whether it was on your white list or just not blocked.

Blocked HTTP traffic will show only that traffic that was blocked, and whether it was because of a Category block or a URL block.

[scottb]

Thanks, I'll check it out and try some scenarios.

Are these reflected at all in Untangle Reports?

[mdh]

Yup! Including ranking of website accesses. You'll get a chance to know exactly how many times someone goes to accountantswithaleatherfetish.com (as if you'd want to).