How to organize traffic accounting?

Question

Computer networks

Good day.
I was given the task of implementing a tool that could be used to see who visits which sites in our organization.
There is a network of about 100 jobs. The domain controller is raised.
So far I see the only option is to organize a bunch of Mikrotik + Squid + SqiudAnalyzer. But I still can't beat tracking https traffic.
Maybe someone has already solved this with other tools? Maybe there is a better solution?

Answer 1

I don't know who SquidAnalyzer is, but the direction is right. But to open https, you need squid to work in bumping mode. To do this, you need a few initial conditions:
- the organization has its own CA
- the root certificate of this CA is trusted on all computers on the network
(otherwise it will not work)
Further described here (there is an article in the table of contents about controlling the https connection)