This discussion has been locked.

You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Sophos UTM - Application Controll - Statistics

zeus1976 over 5 years ago

Hello,

Is there a way to check the following via the Webgui?
- Which IP was blocked by the Application Control?
- Which Application Control App was blocked the most?

If not - is it correct that I have to merge the individual logs manuallly?

Best regards

This thread was automatically locked due to age.

Parents

0 zeus1976 over 5 years ago

Hello,

Any luck that somebody can help me with that?

Best regards
Cancel
Vote Up 0 Vote Down

Cancel
0 zeus1976 over 5 years ago in reply to zeus1976

Hi

After a long search I have found this acticle for those people who are interested

https://community.sophos.com/kb/en-us/118569

Best regards
Cancel
Vote Up 0 Vote Down

Cancel
0 zeus1976 over 5 years ago in reply to zeus1976

Hello,

How do I see which applications have been blocked and which have been let through?

Best regards
Cancel
Vote Up 0 Vote Down

Cancel
0 James Lee over 5 years ago in reply to zeus1976

I use Graylog (open source log management) to collect all syslogs from all our firewalls.

https://www.graylog.org

and with the Sophos UTM extractor: marketplace.graylog.org/.../d689b7da-4fba-4cb4-a10a-de18e033c953

I can create dashboard and do log search for investigation.
Cancel
Vote Up 0 Vote Down

Cancel

Reply

0 James Lee over 5 years ago in reply to zeus1976

I use Graylog (open source log management) to collect all syslogs from all our firewalls.

https://www.graylog.org

and with the Sophos UTM extractor: marketplace.graylog.org/.../d689b7da-4fba-4cb4-a10a-de18e033c953

I can create dashboard and do log search for investigation.
Cancel
Vote Up 0 Vote Down

Cancel

Children

No Data