Guest User!

You are not Sophos Staff.

This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

HTTP HOST Header

Hi, I’m using Web protection in the UTM and have enabled SSL Inspection. I have the logs being sent to an external spunk instance. But when I inspect the logs there is no HTTP host headers being sent in the log message. Is there a way to see the host header? I’m trying to detect the Domain fronting.


This thread was automatically locked due to age.
Parents
  • Hi Matthew and welcome to the UTM Community!

    It sounds like you might not be sending the Web Filtering log.  Show us a relevant line from the Web Filtering log and say what you want to see in addition.

    Cheers - Bob
    PS I moved this thread from the General Discussion to the Web Protection forum.

     
    Sophos UTM Community Moderator
    Sophos Certified Architect - UTM
    Sophos Certified Engineer - XG
    Gold Solution Partner since 2005
    MediaSoft, Inc. USA
Reply
  • Hi Matthew and welcome to the UTM Community!

    It sounds like you might not be sending the Web Filtering log.  Show us a relevant line from the Web Filtering log and say what you want to see in addition.

    Cheers - Bob
    PS I moved this thread from the General Discussion to the Web Protection forum.

     
    Sophos UTM Community Moderator
    Sophos Certified Architect - UTM
    Sophos Certified Engineer - XG
    Gold Solution Partner since 2005
    MediaSoft, Inc. USA
Children
No Data