Thread Info
  • State Not Answered
  • Locked Locked
  • Replies 3 replies
  • Subscribers 1 subscriber
  • Views 5029 views
  • Users 0 members are here
Options
Suggested
This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

App control - detecting and unblocking

PepijnDeneut
Hello,

I have an application that is disabled. I can see in the web filtering log that it is blocked.
But I don't see it in the application control log.
The rule is block and log.
Any ideas?

web filtering log.
2015:04:28-12:45:29 WERSG01-1 httpproxy[6590]: id="0066" severity="info" sys="SecureWeb" sub="http" name="web request blocked, forbidden application detected" action="block" method="GET" srcip="10.220.102.4" dstip="80.200.255.61" user="test" ad_domain="domain" statuscode="403" cached="0" profile="REF_HttProContaPiflaNetwo6 (AD AUTH)" filteraction="REF_HttCffAdit (AD_IT)" size="3198" request="0xdeeaf800" url="mp3.streampower.be/.../mpeg" application="SHOUTCAS" app-id="442"


This thread was automatically locked due to age.
  • 0
    That's where blocks of browsing are reported. 

    Cheers - Bob

    Sorry for any short responses.  Posted from my iPhone.
     
    Sophos UTM Community Moderator
    Sophos Certified Architect - UTM
    Sophos Certified Engineer - XG
    Gold Solution Partner since 2005
    MediaSoft, Inc. USA
  • 0
    So if it's an application it's the application control log.
    If it's browsing, it's the web filtering log.
    but both are application control?
  • 0
    Roughly:

    If it is an application that is going though a web port (such as 80, 443) then it is caught in the web proxy and logs.

    If it is an application that is going though another port then it is caught in the firewall and appears in the app control log.
Unfiltered HTML