In order to see the URL being accessed, you need to do deep SSL
inspection on the traffic, which runs contrary to standard guest access
approaches. (if you have the opportunity to install your own root CA to
a client machine, I wouldn't consider that...
