Guest User!

You are not Sophos Staff.

[8.170][BUG][UNREPRODUCIBLE] Network Visibility dashboard cosmetic

Hi All

According to my dashboard I have 3 rules configured for the netowrk visibility feature. However when going to the relevant section I can only see one rule (pic attached)

Thanks
  • Astaro Beta Report
    --------------------------------
    Version: 8.170
    Type: BUG
    State: UNREPRODUCIBLE
    Reporter: wingman
    Contributor: 
    MantisID: 
    Target version: 
    Fixed in version: 
    --------------------------------

  • I think the issue was because of https://community.sophos.com/products/unified-threat-management/astaroorg/f/110/t/70816

    I've did a fresh install of 8.170 and restore a back up so i might be because of that.   It seems that the system thinks I have other application rules configured as well. Is there a way to confirm via CLI?
  • try this:
    cc get_objects application_control rule
  • That is strange then..Indeed I can see 3 groups as per below


    **** :/tmp # cc get_objects application_control rule
    get_objects returned [
              {
                'autoname' => 0,
                'class' => 'application_control',
                'data' => {
                            'action' => 'block',
                            'applications' => [
                                                'BITTORRE',
                                                'GNUTELLA',
                                                'TOR',
                                                'AVCTPRXY',
                                                'HOPSTER',
                                                'SOCKS'
                                              ],
                            'comment' => '',
                            'destination_networks' => [
                                                        'REF_NetworkAny'
                                                      ],
                            'group' => 'Guest Network Block',
                            'group_filter_productivity' => 0,
                            'group_filter_risk' => 0,
                            'groups' => [],
                            'log' => 1,
                            'name' => 'Block Access for Guest Users',
                            'source_networks' => [
                                                   'REF_NetIntInterUntruVlan2'
                                                 ],
                            'status' => 1
                          },
                'hidden' => 0,
                'lock' => '',
                'nodel' => '',
                'ref' => 'REF_ZlElpmOwod',
                'type' => 'rule'
              },
              {
                'autoname' => 0,
                'class' => 'application_control',
                'data' => {
                            'action' => 'block',
                            'applications' => [
                                                'AVCTPRXY',
                                                'HOPSTER',
                                                'SOCKS',
                                                'TOR'
                                              ],
                            'comment' => '',
                            'destination_networks' => [
                                                        'REF_NetworkAny'
                                                      ],
                            'group' => 'Guest Network Block',
                            'group_filter_productivity' => 0,
                            'group_filter_risk' => 0,
                            'groups' => [],
                            'log' => 1,
                            'name' => 'Guest Network Block',
                            'source_networks' => [
                                                   'REF_NetIntInterUntruVlan2',
                                                   'REF_NoeiaSuXNS'
                                                 ],
                            'status' => 1
                          },
                'hidden' => 0,
                'lock' => '',
                'nodel' => '',
                'ref' => 'REF_AppRulGuestNetwoBlock',
                'type' => 'rule'
              },
              {
                'autoname' => 0,
                'class' => 'application_control',
                'data' => {
                            'action' => 'block',
                            'applications' => [
                                                'AVCTPRXY',
                                                'HOPSTER',
                                                'SOCKS',
                                                'TOR'
                                              ],
                            'comment' => '',
                            'destination_networks' => [
                                                        'REF_NetworkAny'
                                                      ],
                            'group' => 'Guest Network Blocks',
                            'group_filter_productivity' => 0,
                            'group_filter_risk' => 0,
                            'groups' => [],
                            'log' => 1,
                            'name' => 'Guest Network Blocks',
                            'source_networks' => [
                                                   'REF_NetIntInterUntruVlan2',
                                                   'REF_NoeiaSuXNS'
                                                 ],
                            'status' => 1
                          },
                'hidden' => 0,
                'lock' => '',
                'nodel' => '',
                'ref' => 'REF_AppRulGuestNetwoBlock2',
                'type' => 'rule'
              }
            ]



    The other groups were the ones specified on https://community.sophos.com/products/unified-threat-management/astaroorg/f/110/t/70816 . Why I am now able to see them via GUI though?
  • That is strange then..Indeed I can see 3 groups as per below


    **** :/tmp # cc get_objects application_control rule
    get_objects returned [
              {
                'autoname' => 0,
                'class' => 'application_control',
                'data' => {
                            'action' => 'block',
                            'applications' => [
                                                'BITTORRE',
                                                'GNUTELLA',
                                                'TOR',
                                                'AVCTPRXY',
                                                'HOPSTER',
                                                'SOCKS'
                                              ],
                            'comment' => '',
                            'destination_networks' => [
                                                        'REF_NetworkAny'
                                                      ],
                            'group' => 'Guest Network Block',
                            'group_filter_productivity' => 0,
                            'group_filter_risk' => 0,
                            'groups' => [],
                            'log' => 1,
                            'name' => 'Block Access for Guest Users',
                            'source_networks' => [
                                                   'REF_NetIntInterUntruVlan2'
                                                 ],
                            'status' => 1
                          },
                'hidden' => 0,
                'lock' => '',
                'nodel' => '',
                'ref' => 'REF_ZlElpmOwod',
                'type' => 'rule'
              },
              {
                'autoname' => 0,
                'class' => 'application_control',
                'data' => {
                            'action' => 'block',
                            'applications' => [
                                                'AVCTPRXY',
                                                'HOPSTER',
                                                'SOCKS',
                                                'TOR'
                                              ],
                            'comment' => '',
                            'destination_networks' => [
                                                        'REF_NetworkAny'
                                                      ],
                            'group' => 'Guest Network Block',
                            'group_filter_productivity' => 0,
                            'group_filter_risk' => 0,
                            'groups' => [],
                            'log' => 1,
                            'name' => 'Guest Network Block',
                            'source_networks' => [
                                                   'REF_NetIntInterUntruVlan2',
                                                   'REF_NoeiaSuXNS'
                                                 ],
                            'status' => 1
                          },
                'hidden' => 0,
                'lock' => '',
                'nodel' => '',
                'ref' => 'REF_AppRulGuestNetwoBlock',
                'type' => 'rule'
              },
              {
                'autoname' => 0,
                'class' => 'application_control',
                'data' => {
                            'action' => 'block',
                            'applications' => [
                                                'AVCTPRXY',
                                                'HOPSTER',
                                                'SOCKS',
                                                'TOR'
                                              ],
                            'comment' => '',
                            'destination_networks' => [
                                                        'REF_NetworkAny'
                                                      ],
                            'group' => 'Guest Network Blocks',
                            'group_filter_productivity' => 0,
                            'group_filter_risk' => 0,
                            'groups' => [],
                            'log' => 1,
                            'name' => 'Guest Network Blocks',
                            'source_networks' => [
                                                   'REF_NetIntInterUntruVlan2',
                                                   'REF_NoeiaSuXNS'
                                                 ],
                            'status' => 1
                          },
                'hidden' => 0,
                'lock' => '',
                'nodel' => '',
                'ref' => 'REF_AppRulGuestNetwoBlock2',
                'type' => 'rule'
              }
            ]



    The other groups were the ones specified on https://community.sophos.com/products/unified-threat-management/astaroorg/f/110/t/70816 . Why I am now able to see them via GUI though?
  • Probably something broke during all the beta-upgrades. I'd suggest you drop the whole backup file and either use a 'clean' one from 8.1 or configure you machine manually. That would be the safest bet.

    You can, of course, try to delete those objects from the commandline. Look for the reference-lines at the bottom of each block ( [FONT="Courier New"]'ref'=>'REF_...',[/FONT]) and issue a `[FONT="Courier New"]cc del_object REF_YourExactReferenceHere[/FONT]` for each of them. You should see a message "del_object returned 1" if the deletion was successful.

    Cheers,
    Kai
  • that did the trick and I can now see one 1 rule [:)]