Guest User!

You are not Sophos Staff.

[8.162][BUG][OPEN] Web Application Security Counter still broken on dashboard.

Hi,
The Web Application Security counter shows 0 requests served on the dashboard. The other graphs and logs show that the requests are processing just fine.

Regards
Bill
Parents Reply Children
  • Hi Kai, I do have the waf.ph file and here is the output that you asked for: 
    gatekeeper:/var/log # cc get_dashboard_data |grep -A7 "'waf'"
                               'waf' => {
                                          'attackers' => 0,
                                          'attacks' => 0,
                                          'clients' => 0,
                                          'requests' => 0,
                                          'status' => 1,
                                          'traffic' => 0
                                        },

    I believe I have found the problem. WAF status was not active on the dashboard before so this didn't affect anybody but now it is becoming a problem. In my system logs, every time /usr/local/bin/reportcontrol.sh runs I get the following errors:
    2011:04:04-13:05:01 gatekeeper /usr/sbin/cron[20479]: (root) CMD (   /usr/local/bin/reportcontrol.sh)
    2011:04:04-13:05:02 gatekeeper postgres[20489]: [2-1] ERROR:  invalid input syntax for type inet: ""
    2011:04:04-13:05:02 gatekeeper postgres[20489]: [2-2] STATEMENT:  select ins_waf($1, $2, $3, $4, $5, $6, $7, $8)

    I had complained about it in previous beta http://www.astaro.org/closed-forums-read-only/asg-v8-betas/asg-v8-000-beta-closed/asg-v8-000-beta-closed-threads/31634-7-910-bug-closed-repeated-errors-system-log.html and it seems other people have this problem on their production systems also http://www.astaro.org/astaro-gateway-products/management-networking-logging-reporting/33040-reporting-error-waf.html so it will be a problem for some upgrades.

    Hope this helps
    Regards
    Bill.