NO LIVE LOGS under APPLICATION FILTER ONLY

kunkka,

strange behaviour. Did you try a reboot?

Try to apply another Application filter (Allow all) and see if the issue persists.

Regards

Yes Sir..

I already reboot and create another fwall rule just to allow all and applied some policy under application control.

and Still no LIVE LOGS under APPLICATION FILTER.

HOW SAD

Kunkka,

if you cannot open a ticket with Support, I would recommend you to rebuild the reporting DB using CLI > Option 5 and then 4 or reinstall XG.

Regards

Hi kunkka, 

At the moment as per the behavior of XG, the application filter logs will be viewed which are denied. You will not get allowed application in log viewer. 

Hi Sir Aditya Patel

I dont understand what you're saying.. Please dont get mad on me..

Correct me if im wrong? okay....

This is my interpretation for what have u said

As the moment SOphos XG are not capable of doing application logs?

Thank you

Kunkka,

Aditya Patel is saying that you will see logs inside Application Logs only if the APP is blocked.

This is the current behaviour.

Regards

Hi kunkka, 

Could you post a snapshot of the issue, you may mention your expectation on the posted snapshot. 

As per the first diagram, it would mention the logs on log viewer and will show only denied logs. 

The second diagram would show live logs. 

The third option will show the logs with is not live and have 30 minutes delay with the live logs. This logs will remain and stored on your harddisk.

Hi Sir Aditya Patel

This is all my Configurations..

kindly check if my configurations are wrong 

I tried to denied facebook sub application under 16.05.4 MR4
but then all denied features are still permitted.

thank you

Kunkka,

Make sure to tick scan http and this is the first rule in the firewall rules list.

Regards

Yes Sir.

It is already ticked.. and i also add SSL CA certificate.

Thank you