This discussion has been locked.

You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Web GUI Packet Capture showing wrong user name

Using XGS with SFOS 20.0.1 during packet capture on the Web GUI I noticed that traffic of user A was shown as traffic of user B with the correct source/destination IPs.

At the same time the firewall logs were showing User A correctly.

Is this a known issue?

I have not seen that on earlier versions but I do not use GUI packet capture very often.

This thread was automatically locked due to age.

0 Vivek Jagad 3 months ago

Hi LHerzog ,

Thank you for reaching out to the community, can you if possible share the screenshots ?

Thanks & Regards,
_______________________________________________________________

Vivek Jagad | Team Lead, Technical Support, Global Customer Experience

Log a Support Case | Sophos Service Guide
Best Practices – Support Case | Security Advisories
Compare Sophos next-gen Firewall | Fortune Favors the prepared
Sophos Community | Product Documentation | Sophos Techvids | SMS
If a post solves your question please use the 'Verify Answer' button.
Cancel
Vote Up 0 Vote Down

Cancel
0 LHerzog 3 months ago in reply to Vivek Jagad

Not yet. But I have noticed this was for SMB traffic Port 445 to a Windows file server.

While doing another GUI packet capture, I could see SMB traffic of Firewall-authenticated users not showing the user name in packet capture.
Cancel
Vote Up 0 Vote Down

Cancel