>What I want to see is which one of my users is trying to access these sites   You have got the SSID running in NAT mode and the MX doing the content filtering.  The MX can't see who the client is because of the NAT mode on the SSID.   If you create a seperate VLAN for the SSID on the MX and then have the SSID bridged to that VLAN you'll be able to see the actual clients. ... View more