This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

In Sophos UTM, how can you see the public addresses that are accessing your Web Servers?

Hi All,

I've been trying to figure out on how to see in the logs what were the Public IP Addresses that accessed our web servers that are currently NATed. When I tried to filter from the Log & Reporting -> Firewall tab, I cannot see the public IP address. Even on View Log Files -> Search Log Files tab, I cannot see the specific public IP address that accessed our server. Is there a way to check on this? Or Sophos UTM doesn't have this option?

Thank you in advanced.

Oliver



This thread was automatically locked due to age.
Parents
  • In the logs you should see the interface.

    Take a look to the interfaces and check the assigned IP.


    Dirk

    Systema Gesellschaft für angewandte Datentechnik mbH  // Sophos Platinum Partner
    Sophos Solution Partner since 2003
    If a post solves your question, click the 'Verify Answer' link at this post.

  • Hi dirkkotte

    Thank you for the reply.

    I can see the IP addresses but they are not complete. For example, when I tried to filter a specific public IP address, it doesn't show in the logs.

  • do you have enabled logging within NAT- and Firewall-rule?
    (you can enable logging within auto-created firewall-rules too)


    Dirk

    Systema Gesellschaft für angewandte Datentechnik mbH  // Sophos Platinum Partner
    Sophos Solution Partner since 2003
    If a post solves your question, click the 'Verify Answer' link at this post.

Reply
  • do you have enabled logging within NAT- and Firewall-rule?
    (you can enable logging within auto-created firewall-rules too)


    Dirk

    Systema Gesellschaft für angewandte Datentechnik mbH  // Sophos Platinum Partner
    Sophos Solution Partner since 2003
    If a post solves your question, click the 'Verify Answer' link at this post.

Children