Thread Info
  • State Not Answered
  • Locked Locked
  • Replies 5 replies
  • Subscribers 1 subscriber
  • Views 1013 views
  • Users 0 members are here
Options
Suggested
This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Log: Profile without filteraction

pelumu
Hi,

I have a http-profile for 2 IPs for 2 machines. When I use one of the machines the profile is use with the asociated filteraction appears in the log:

2010:01:22-17:54:45 ASG httpproxy[13570]: id="0001" severity="info" sys="SecureWeb" sub="http" name="http access" action="pass" method="GET" srcip="192.168.1.200" user="" statuscode="200" cached="0" profile="REF_wnbfXdOXsy (Philips NP 2500)" filteraction="REF_NPYwHLUXSA (Vollzugriff)" size="288" time="62 ms" request="0x87f12a8" url="GER-ieupdate003.gdatasecurity.de/

When I use the other machine the log shows the used profile but an empty filteraction:

2010:01:22-18:09:13 ASG httpproxy[13570]: id="0002" severity="info" sys="SecureWeb" sub="http" name="web request blocked" action="block" method="POST" srcip="192.168.1.125" user="" statuscode="400" cached="0" profile="REF_wnbfXdOXsy (Philips NP 2500)" filteraction=" ()" size="2235" time="0 ms" request="0x8809668" url="www.ecdinterface.philips.com:80/.../ecdav" exceptions="" error=""

Any ideas?

Kind regards,
Peter


This thread was automatically locked due to age.
Parents
  • 0
    It would be clearer if we could see the identical access attempt in both cases, however, it does appear that the second machine, for some reason, does not qualify for any filter assignments.  Please show a pic of the "Phillips NP 2500" profile and of the "Volzugriff" Filter Action.

    Cheers - Bob
     
    Sophos UTM Community Moderator
    Sophos Certified Architect - UTM
    Sophos Certified Engineer - XG
    Gold Solution Partner since 2005
    MediaSoft, Inc. USA
Reply
  • 0
    It would be clearer if we could see the identical access attempt in both cases, however, it does appear that the second machine, for some reason, does not qualify for any filter assignments.  Please show a pic of the "Phillips NP 2500" profile and of the "Volzugriff" Filter Action.

    Cheers - Bob
     
    Sophos UTM Community Moderator
    Sophos Certified Architect - UTM
    Sophos Certified Engineer - XG
    Gold Solution Partner since 2005
    MediaSoft, Inc. USA
Children