Thread Info
  • State Not Answered
  • Locked Locked
  • Replies 5 replies
  • Subscribers 1 subscriber
  • Views 908 views
  • Users 0 members are here
Options
Suggested
This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

html virus & executive report

joequick
My Daily Excutive Report Summary shows HTTP viruses blocked 36.
Looks like Astaro did its job.

The Websecurity >>> Web Filtering >> TOP10 Blocked Virus Names section is empty and show nothing.

I go into WebAdmin >>> Reporting >>> WebSecurity >>> Blocked Usage select Top Blocked Viruses.

It displays
1 HTML/Infected.WebPage.Gen 12 requests 5 Users 1 Domain

I double click on it expecting to display a list of the users and domain they were trying to access and get nothing.

Now I am left to wonder if something got in and was trying to get "more bad stuff in". I find it disheartening that Astaro doesnt give you additional infomation when it blocks viruses. Like the user/ip of the machine and the ip/domain of the  where the virus was coming from.

Am I the only one that beleives this important information to have? Or am I just looking in the wrong place for this information?


This thread was automatically locked due to age.
Parents
  • 0
    Joe, it sounds like the reporting database is broken.  Search here for reindex postgresql and try that.  If not, there are also suggestions on recreating whichever databases are corrupted.

    Cheers - Bob
     
    Sophos UTM Community Moderator
    Sophos Certified Architect - UTM
    Sophos Certified Engineer - XG
    Gold Solution Partner since 2005
    MediaSoft, Inc. USA
  • 0 in reply to BAlfson
    Thanks Bob. I did try to search for "'PostgreSQL reindex'" but all I came up with was 1,215 posts by you saying to 
    search for "'PostgreSQL reindex'"
      LOL !!! Am am exagerating a tad bit. I will search again when I have a little more time.

    Anyway, I was able search the content filter logs and find that it has somethign to do with the 
    http://cdn4.specificclick.net
     cookie or infected server.

    I quick google search came up with something about a iFrame size of 0 that Avira detects and others ingore from a year ago.

    So my concern level is not as high. I will add sclick to my blocked sites and see what happens.

    Thanks again Bob.

    BTW... Astaro says by v7.50 I wont be able to send you emails with bad words [:(]
  • 0 in reply to joequick
    Hey, I don't mind bein' the straightman if the act gets some laughs! [H]
     
    Sophos UTM Community Moderator
    Sophos Certified Architect - UTM
    Sophos Certified Engineer - XG
    Gold Solution Partner since 2005
    MediaSoft, Inc. USA
Reply Children
No Data