Are web requests from Endpoint clients logged in both http.log and eplog.log when "Endpoint Protection->Web Control->Advanced, Scan traffic on both gateway and endpoint" (and Endpoint Web Control) is enabled?
I don't have 9.3beta associated endpoints so I can't readily answer this for myself.
My observations for 9.113 are that web activity only appears in eplog.log even when the gateway is configured to scan. A bug? (logging or scanning?)
Guest User!
You are not Sophos Staff.