Self-service search for Secure Browser

Use the self-service search to get insights into the browsing sessions of the Citrix Workspace users who are using the Citrix Secure Browser Service. Citrix Secure Browser is a cloud service that provides a safe internet browsing experience without compromising your corporate network security. When users access web applications using the Secure Browser, events such as session connect, session launch, published applications, and deleted applications are generated for each user connection. Citrix Analytics for Security receives these events and displays them on the self-service page. You can track the users and their browsing sessions.

For more information on the search functionalities, see Self-service search.

Select the Secure Browser data source

To view the Secure Browser events, in the search box, select Secure Browser from the list. Select the time period for which you want to view the events and then click Search.

Select secure browser data

By default, the self-service page displays the events for the last one month. The page also provides you with a search box to filter and focus on the required events.

Secure Browser overview page

Specify search query to filter events

Place your cursor in the search box to view the list of dimensions for the Secure Browser events. Use the dimensions and the operators to specify your query and search for the required events.

Secure Browser dimension list

For example, you want to view the browsing event details for a user “aa” who has permission to access various host services such as,

  1. Enter “user” in the search box to view the related dimensions.

    Secure browser query 1

  2. Click User-Name and enter the value “aa” using the equal operator.

    Secure browser query 2

  3. Select the AND operator and the Allow-Access dimension. Assign the value “true” to Allow-Access using the equal operator. The “true” value indicates that the user can access the host services.

    Secure browser query 4

  4. Select the time period and click Search to view the events on the DATA table.

View user event details

You can view the following data received from the Secure Browser service:

  • Time- Date and time when the user event occurred.

  • User name- The user who initiated the event.

  • Session ID- The unique number assigned to the user session.

  • Client IP- IP address of the user device.

  • Host name- The host service accessed by the user over the network.

  • Allow access- The user is allowed or denied access to the host service.

Self-service search for Secure Browser