ProxySG & Advanced Secure Gateway

 View Only
Back to discussions
Expand all | Collapse all

How to create an Access Log that lists the IP address of sites being accessed

  • 1.  How to create an Access Log that lists the IP address of sites being accessed

    Posted Aug 05, 2020 05:21 AM
    Hello All, we would like to see the remote IP (Destination URL IP) which users are trying to access. By default this will not show up in the logs. I did some research and found the below two KBs.

    1) https://knowledge.broadcom.com/external/article?legacyId=tech244966

    Now is this KB still applicable on the latest version of Proxy? Moreover instead of sending logs to a dedicated FTP server can't we see these logs on the ProxySG when doing the troubleshooting?

    2) https://knowledge.broadcom.com/external/article/165978/how-do-i-add-the-destinationserver-ip-ri.html

    This KB talks about modifying the configuration file of Reporter to see the remote IP. However, it also further states that in the last paragraph that Once the config file is modified it is no longer a supportable version of OS, does that mean if there is any issue it will not be supported since the config file is modified?

    Appreciate your feedback on it. Thanks

    ------------------------------
    Symantec Enthusiast
    ------------------------------


  • 2.  RE: How to create an Access Log that lists the IP address of sites being accessed
    Best Answer

    Broadcom Employee
    Posted Aug 05, 2020 11:10 AM
    HI Symspec,

    That first KB is still applicable to the latest version of ProxySG. And yes, you can start a log tail if you would like under Statistics > Access Logging.

    The main hurdle is that Reporter is programmed to read certain log formats - bcreportermain_v1, bcreporterssl_v1, etc. The changes that are recommended are for on the Reporter itself, and not on the ProxySG.

    The second KB appears to be for Reporter 9, which isn't supported anyways. In Reporter 10.3.1.1. and later, you can add fields in Reporter from the GUI. More on how to do that here.

    Thanks!
    Original Message