Forum Discussion
Web Content Filter reports - nearly useful
Hi,
As we have opened the can of worms that is "becoming aware of what end users are actually doing on their work computers" for a few organisations there are inevitable follow up questions.
The default reports available for web protection follow a lot of the really high-level other reports. Just showing the top ten (or so) most visited URLs and the top ten computers visiting blocked/audited sites.
This is so almost useful it hurts.
The information that is actually wanted is the users who are accessing these things agains the URLs they are accessing.
We can get this through advanced hunting so the data is there for the reports to pull from but advanced hunting can't seem to see or filter queries by the category that is blocked!
Again.. so almost helpful!
has anyone figure out how to gel categories together with advanced hunting? we need this to filter down as a 30 day query goes over 10000 line limit.
Any chance of getting feedback to the people who do the reports to give us the option to make them just that bit more helpful? anything on the horizon?
2 Replies
- We have this issue too, it is so close to giving us what we need, instead we are looking at other solutions to go along with defender such as SASE solutions etc.
I have brought this up to our Microsoft contacts many times- absolutely agree. The current are literally useless if i can research what a specific user is doing
