Thread Info
  • State Not Answered
  • Locked Locked
  • Replies 3 replies
  • Subscribers 1 subscriber
  • Views 711 views
  • Users 0 members are here
Options
Suggested
This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Time event not working

rocketboy
Wondering if someone can help me. You'll note in the screenshot below that I have a proxy profile setup with two filter assignments. 



Both filter assignments are time based, first Boys - points uses this time definition: 



Boys - standard  uses this time definition:



The goal is to have the Boys - standard filter assignment be in effect unless the Boys - points filter assignment's time definition allows it to take affect. 

This works with the one exception that I have to set the time definition on Boys - points to a full 24 hours for it to work. If I set it like is shown in the screen shot (to only be applicable for 1 hour on a particular day) then the filter keeps defaulting to Boys - standard. 

Can anyone help me figure out why?


This thread was automatically locked due to age.
  • 0
    Version of Astaro?

    What happens if the "Boys - points" Time Event starts a week ago?

    Please show a relevant line (an access from their PC between 11 & 12 on 4/4) from the Web Filtering log.

    Cheers - Bob
     
    Sophos UTM Community Moderator
    Sophos Certified Architect - UTM
    Sophos Certified Engineer - XG
    Gold Solution Partner since 2005
    MediaSoft, Inc. USA
  • 0 in reply to BAlfson
    v8.301 (sorry for not including that in the OP)

    I set the "Boys - points" event to 2012-03-29 09:00 until 2012-04-05 10:00 and tested it at 9:04. This is what the log showed:

    2012:04:05-09:05:25 byers httpproxy[26170]: id="0001" severity="info" sys="SecureWeb" sub="http" name="http access" action="pass" method="GET" srcip="10.242.2.6" dstip="66.220.158.11" user="boys" statuscode="302" cached="0" profile="REF_HttProBoys (Boys)" filteraction="REF_HttCffBoysPoints (Boys - points)" size="0" request="0xb66329d8" url="facebook.com/" exceptions="" error="" category="195" reputation="neutral" categoryname="Social Networking"

    I then set the "Boys - points" event to 2012-04-05 09:00 until 2012-04-05 10:00 and tested it at 9:07. This is what the log showed:

    2012:04:05-09:08:05 byers httpproxy[26170]: id="0062" severity="info" sys="SecureWeb" sub="http" name="web request blocked, forbidden url detected" action="block" method="GET" srcip="10.242.2.6" dstip="" user="boys" statuscode="403" cached="0" profile="REF_HttProBoys (Boys)" filteraction="REF_HttCffBoysWeekda (Boys - standard)" size="6250" request="0xac196010" url="facebook.com/" exceptions="" error=""

    So, as you can see the filtering is working but for some reason it's ignoring the event if the start date is not set to at least a day before the end date of the event.

    So, is this a bug, am I missing something, or just not using it the way it's intended?

    thanks.
  • 0
    I bet it's a bug, but it seems so obvious that it's hard to believe it hadn't been found before.  Let's hope one of the V9 beta testers sees this and tests it.

    Cheers - Bob
     
    Sophos UTM Community Moderator
    Sophos Certified Architect - UTM
    Sophos Certified Engineer - XG
    Gold Solution Partner since 2005
    MediaSoft, Inc. USA
Cookie Information Banner