USG110 - UTM Content Filter results not being logged?
Hi guys,
We experience the following issue with our USG110 @ V4.30(AAPH.1)ITS-WK51:
We've activated an UTM Content Filter and define a Content Profile where the 4 Content Filter Category Services are enabled. Within the Policy Control this Content Filter has been assigned to our web access rules.
Within the filter definition: While Security Threat Web Pages and Managed Web Pages are set to BLOCK, Unrated Web Pages and Category Server Unavailable are set to WARN only. But the LOG Checkbox behind each of the 4 Services are all enabled.
The filter is working so far. But only both WARN categories are being added to the log. Any blocked webpages are not being logged. Is it a bug or feature?
Greetings
Joerg
We experience the following issue with our USG110 @ V4.30(AAPH.1)ITS-WK51:
We've activated an UTM Content Filter and define a Content Profile where the 4 Content Filter Category Services are enabled. Within the Policy Control this Content Filter has been assigned to our web access rules.
Within the filter definition: While Security Threat Web Pages and Managed Web Pages are set to BLOCK, Unrated Web Pages and Category Server Unavailable are set to WARN only. But the LOG Checkbox behind each of the 4 Services are all enabled.
The filter is working so far. But only both WARN categories are being added to the log. Any blocked webpages are not being logged. Is it a bug or feature?
Greetings
Joerg
0
Comments
-
Hi Usg user
Although it is not selected as active, UTM logs must be enabled in Log settings. Utm will you log in and try again?
0 -
Hi bymusty,
I'm aware of this. The normal log is already activated. Nevertheless the log doesn't contain anything in this regard.
0 -
@USG_User
I think your Firmware is 4.25 not 4.30.....
I tested it locally with firmware: V4.30(AAPH.0)ITS-WK06-r82206 and the message will be displayed on log page.
I will private message the firmware to you for your testing.
Charlie0 -
Hi Charlie,
Thanks for your inexhaustible effort. This is a great help to the community.
We've got a bugfixed v4.30 running, not a 4.25.
First I have set all checkboxes in the Content Control as advised above. And surprise, all blocked websites are being logged now. Then I have unticked some checkboxes again to see, which one is responsible for the logging. But finally I have the same "checkbox state" than before, but the log is still working.
The content filter report service is only for reporting our query results to the Zyxel server, and that's why not really necessary.
Enable Safe Search is only for suppressing search results for some search machines. Not really important for the right working of the log.
Insofar I didn't change any important things. Only ticking all checkboxes and subsequently unticking. But now it works.
Thanks and greetings
Joerg
0
Categories
- All Categories
- 415 Beta Program
- 2.3K Nebula
- 141 Nebula Ideas
- 94 Nebula Status and Incidents
- 5.5K Security
- 216 USG FLEX H Series
- 262 Security Ideas
- 1.4K Switch
- 71 Switch Ideas
- 1K Wireless
- 39 Wireless Ideas
- 6.3K Consumer Product
- 243 Service & License
- 382 News and Release
- 81 Security Advisories
- 27 Education Center
- 8 [Campaign] Zyxel Network Detective
- 3K FAQ
- 34 Documents
- 34 Nebula Monthly Express
- 83 About Community
- 71 Security Highlight