Self-service search for Secure Browser 编辑

Use the self-service search to get insights into the browsing sessions of the Citrix Workspace users who are using the Citrix Secure Browser Service. Citrix Secure Browser is a cloud service that provides a safe internet browsing experience without compromising your corporate network security. When users access web applications using the Secure Browser, events such as session connect, session launch, published applications, and deleted applications are generated for each user connection. Citrix Analytics for Security receives these events and displays them on the self-service page. You can track the users and their browsing sessions.

For more information on the search functionalities, see Self-service search.

Prerequisite

To receive events from a Secure Browser, enable Hostname tracking in the Secure Browser to log host names for the user sessions. This information is sent to Citrix Analytics for Security. For more information, see Manage published secure browsers.

Select the Secure Browser data source

To view the Secure Browser events, select Secure Browser from the list. By default, the self-service page displays the events for the last one day. You can also select the time period for which you want to view the events.

Specify search query to filter events

Place your cursor in the search box to view the list of dimensions for the Secure Browser events. Use the dimensions and the operators to specify your query and search for the required events.

For example, you want to view the browsing event details for a user “aa” who has permission to access various host services such as google.com, amazon.com.

1. Enter “user” in the search box to view the related dimensions.

   

2. Click User-Name and enter the value “aa” using the equal operator.

   

3. Select the AND operator and the Allow-Access dimension. Assign the value “true” to Allow-Access using the equal operator. The “true” value indicates that the user can access the host services.

   

4. Select the time period and click Search to view the events on the DATA table.

View user event details

You can view the following data received from the Secure Browser service:

• Time- Date and time when the user event occurred.

• User name- The user who initiated the event.

• Session ID- The unique number assigned to the user session.

• Client IP- IP address of the user device.

• Host name- The host service accessed by the user over the network.

• Allow access- The user is allowed or denied access to the host service.