In Sophos UTM, how can you see the public addresses that are accessing your Web Servers?

Hi All,

I've been trying to figure out on how to see in the logs what were the Public IP Addresses that accessed our web servers that are currently NATed. When I tried to filter from the Log & Reporting -> Firewall tab, I cannot see the public IP address. Even on View Log Files -> Search Log Files tab, I cannot see the specific public IP address that accessed our server. Is there a way to check on this? Or Sophos UTM doesn't have this option?

Thank you in advanced.

Oliver

0 dirkkotte 1 month ago

In the logs you should see the interface.

Take a look to the interfaces and check the assigned IP.

Dirk

Systema Gesellschaft für angewandte Datentechnik mbH // Sophos Platinum Partner
Sophos Solution Partner since 2003
If a post solves your question, click the 'Verify Answer' link at this post.
Cancel
Vote Up 0 Vote Down

Sign in to reply

Verify Answer

Cancel
0 Oliver Naabay 1 month ago in reply to dirkkotte

Hi dirkkotte

Thank you for the reply.

I can see the IP addresses but they are not complete. For example, when I tried to filter a specific public IP address, it doesn't show in the logs.
Cancel
Vote Up 0 Vote Down

Sign in to reply

Verify Answer

Cancel
0 dirkkotte 1 month ago in reply to Oliver Naabay

do you have enabled logging within NAT- and Firewall-rule?
(you can enable logging within auto-created firewall-rules too)

Dirk

Systema Gesellschaft für angewandte Datentechnik mbH // Sophos Platinum Partner
Sophos Solution Partner since 2003
If a post solves your question, click the 'Verify Answer' link at this post.
Cancel
Vote Up 0 Vote Down

Sign in to reply

Verify Answer

Cancel
0 Oliver Naabay 1 month ago in reply to dirkkotte

Hi Dirk,

Yes, I enabled all the logging.It's just weird that the logs are not complete.
Cancel
Vote Up 0 Vote Down

Sign in to reply

Verify Answer

Cancel