Astaro.org (Read-Only)

UTM 9.1 Public Beta [9.065][MYTH] WAF reporting not working

[9.065][MYTH] WAF reporting not working

utm_kid over 12 years ago

Hello ,

with 9.060 web application firewall reporting for blocked traffice was work and showing log/report

but with 9.065 its not working

thanks

Parents

0 Billybob over 12 years ago

Hi, can you post a few lines from the logs of the traffic that was blocked and not counted?
Cancel
Vote Up 0 Vote Down

Sign in to reply

Verify Answer

Cancel

Reply

0 Billybob over 12 years ago

Hi, can you post a few lines from the logs of the traffic that was blocked and not counted?
Cancel
Vote Up 0 Vote Down

Sign in to reply

Verify Answer

Cancel

Children

0 utm_kid over 12 years ago in reply to Billybob

Hello Bill,

yes i search for log but could not get log ,but when i did  many xss scripts  attacks live
log had nothing but one of the scripts was able to show message on ips

from ips log

2013:02:03-16:53:32 acenn snort[6301]: id="2101" severity="warn" sys="SecureNet" sub="ips" name="Intrusion protection alert" action="alert" reason="POLICY-OTHER web server file upload attempt" group="500" srcip="192.168.7.135" dstip="192.168.3.125" proto="6" srcport="44127" dstport="80" sid="5708" class="Misc activity" priority="3"  generator="1" msgid="0"

from  http log

2013:02:03-16:53:32 acenn httpproxy[6227]: id="0001" severity="info" sys="SecureWeb" sub="http" name="http access" action="pass" method="GET" srcip="192.168.7.135" dstip="192.168.3.125" user="" statuscode="404" cached="0" profile="REF_DefaultHTTPProfile (Default Proxy)" filteraction="REF_DefaultHTTPCFFAction (Default content filter action)" size="204" request="0xb67f098" url="www.mydomain.com/.../

if you want i will send you xss cheat sheet

thanks
Cancel
Vote Up 0 Vote Down

Sign in to reply

Verify Answer

Cancel