Site no longer appears in Logging and Reporting-->Webserver Protection-->Details tab after firmware upgrade.

Hi,

Are you reporting a change in reports after the upgrade? Can you please post a screenshot of previous reports and present reports to verify this ? 

Thanks

Sachin,

I do not see an option to post an attachment.  Even if there was an option, I am not comfortable doing so in a public forum.  Can you post your Sophos email address and I will send you the examples there?  I also noticed on the Log Partition Status page is showing all 0's.  We have logs going back to July 2015.  It is showing:

Log partition size: 0MB

Free space 0MB

Current fillup rate: 0MB/day

Free space will be exhausted in 0 days at the current fillup rate.

I think I am going to upgrade to the latest firmware to see if that takes care of the problem.

I upgraded to the newest firmware version 9.402-7, but still no change.  Is it possible that doing a full restore (via the Management>Backup/Restore in WebAdmin) could or would help anything here?

Hi everyone,

this is my version:

And now the LOGGING &REPORTING - WEBSERVER PROTECTION in empty, by 2 days.

Very strange, the SG310 in new and resatarded...

HELP! PLS!

Hi, Alberto, and welcome to the UTM Community!

Guys, it's difficult to tell if this is the graphs that are broken or the underlying databases.

It's been over three years since I had to use the following, so I'm not certain, but I believe that it fixes the graphs and does not erase any existing content.  As root at the command line:

rm /var/log/reporting/rrd/*
/etc/init.d/syslogng restart
/etc/init.d/rrdcache restart
/usr/local/bin/reporter/system-reporter.pl

If that didn't resolve the problem (my guess is that Jim should start here), the following command re-initializes the PostgreSQL databases, deleting all of the information currently used by the graphs:

/etc/init.d/postgresql92 rebuild

Of course, if you have a paid subscription, you should have Sophos Support look at your UTM and make the decision of which you need.  Let us know if that resolved your issue.

Cheers - Bob

Hi

thanks for the response.

I have a premium support, the license for the firewall is for 3 years and i bought it 6 month ago.

i Must write to the reseller?

Tnanks

Before you do that, try a trick just discovered by fellow member Louis-M.  In 'Logging & Reporting >> Reporting Settings', increase the amount of time Webserver Protection data is kept.  Did that resolve your problem?

Cheers - Bob

I have ours set to 3 months.  The problem is that there is no reporting on other sites at all after the firmware update.  I can pull data from before the firmware upgrade on our other sites, but nothing after.  For instance we had multiple sites that were showing in Logging and Reporting-->Webserver Protection.  Now only 1 site is populating any data there.  The WAF log shows data for all the sites, but the Logging and Reporting-->Webserver Protection does not.  It now only shows data for 1 of our sites.  This happened directly after the firmware upgrade.  Also as I mentioned the Log Partition Status page (Logging & Reporting) shows all 0s now.  This is also directly after the firmware upgrade.

HI,

I have the same problem  and with the last firmware 9.403-4 the situation is not changed.

Alberto

same here:

in "Logging & Reporting / Webserver Protection / Details / top virtual Hosts" only 1 Domain of 10 configured is listed for today or last 7 days

for March and April all things are ok in reporting - seems it starts in May

on usage Graphs: definitively not all requests reported - there is a average of 30 requests for today - there shoudt be some thousends

anyone opened a call to sophos?