Milos  Freshman Member

@@IntL_Daniel, how did you started using the SecuManager?

Thanks, leaving this ticket open for now.

Any news on this?

Hi @Zyxel_Stanley , I do not understant your comment / the new topic you have added.Shall I follow up on this? What's the usage of creating the idea topic? As Zyxel USG is producing a lot of logs, I'm sure we can analyze those and get a detailed report. My question is: how to match accessed websites and traffic logs so…

Roger that, thx.

Thank you, but how to connect those two, by matching the log time?

Thank you @Ian31 , how about matching traffic logs with actual websites? For example, let's assume someone exchanged a lot with dropbox, how to associate the traffic to dropbox?

Thanks! If I understand correctly, secu reporter is not yet live, only available to a limited group of testers in beta. On our end, we're building our own secu reporter if I may say so, and need to know what logs is ZyXEL USG able to send. We are interested in bandwidth usage logs per IP and traffic type.

Thank you @Ian31 , I was finally able to solve this out. None of the https websites were logged as I first had to enable: "Enable HTTPS Domain Filter for HTTPS traffic" in the content Filter settings under UTM Profile, it then worked.

Thanks @Ian31, this is exactly what I have, but not all logs are sent on the Graylog server side.I am opening a few web pages, and only some of those are shown. The only difference we have is that on my side, Action for managed web pages is set to Block and I only have a few categories there like: Nudity, Pornography,…

Hmmm!!!!

Thank you, was able to find it. Is there some documentation on how CF works and how to generate reports?

Roger that, thank you!

Thank you Zyxel_Cooldia, appreciate! Just one question about the packets capture, it only captures the packets once launched. For example, if this Rx was one time, I cannot analyze the backlogs?