This discussion has been locked.

You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Log: Profile without filteraction

Hi,

I have a http-profile for 2 IPs for 2 machines. When I use one of the machines the profile is use with the asociated filteraction appears in the log:

2010:01:22-17:54:45 ASG httpproxy[13570]: id="0001" severity="info" sys="SecureWeb" sub="http" name="http access" action="pass" method="GET" srcip="192.168.1.200" user="" statuscode="200" cached="0" profile="REF_wnbfXdOXsy (Philips NP 2500)" filteraction="REF_NPYwHLUXSA (Vollzugriff)" size="288" time="62 ms" request="0x87f12a8" url="GER-ieupdate003.gdatasecurity.de/

When I use the other machine the log shows the used profile but an empty filteraction:

2010:01:22-18:09:13 ASG httpproxy[13570]: id="0002" severity="info" sys="SecureWeb" sub="http" name="web request blocked" action="block" method="POST" srcip="192.168.1.125" user="" statuscode="400" cached="0" profile="REF_wnbfXdOXsy (Philips NP 2500)" filteraction=" ()" size="2235" time="0 ms" request="0x8809668" url="www.ecdinterface.philips.com:80/.../ecdav" exceptions="" error=""

Any ideas?

Kind regards,
Peter

This thread was automatically locked due to age.

0 BAlfson over 16 years ago

It would be clearer if we could see the identical access attempt in both cases, however, it does appear that the second machine, for some reason, does not qualify for any filter assignments. Please show a pic of the "Phillips NP 2500" profile and of the "Volzugriff" Filter Action.

Cheers - Bob

Sophos UTM Community Moderator
Sophos Certified Architect - UTM
Sophos Certified Engineer - XG
Gold Solution Partner since 2005

MediaSoft, Inc. USA
Cancel
Vote Up 0 Vote Down

Cancel
0 pelumu over 16 years ago in reply to BAlfson

Here are the pics:
Cancel
Vote Up 0 Vote Down

Cancel
0 RFCat_vk_01 over 16 years ago in reply to pelumu

Hi,
A quick look shows that the 2 profiles are configured differently. One uses itself as a fall back, I suggest you change that to default.
I suspect the the profile that doesn't show a filter action is going through to default because you haven't defined a default.

Ian M
Cancel
Vote Up 0 Vote Down

Cancel
0 pelumu over 16 years ago in reply to RFCat_vk_01

Perhaps the same name in filter action and filter assignment is a little confusing. So I renamed the filter action and filter assignment (see new pics).
I tried the suggestion of RFCat_vk, but it doesn't help.

Kind regards,
Peter
Cancel
Vote Up 0 Vote Down

Cancel
0 pelumu over 15 years ago

The problem is solved.

Astaro has corrected the software and now it works.

Astaro has a very good support.
Cancel
Vote Up 0 Vote Down

Cancel