We have a UTM v9.355. Last week's weekly executive report showed "HTTP/S Malware blocked" at "1". We would like to know what malware (and from what internal computer) was blocked but have been unable to locate a log or any further information. An unanswered thread in June 2008 (https://community.sophos.com/products/unified-threat-management/f/55/t/43714) asked this question.
We searched the Web Filter logs for the past month but were unable to find any reliable results. We downloaded the EICAR test virus, which triggered event id 0056 ("web request blocked, virus detected") in the web filter log. Searching this event id gave no results. We tried nearby identifiers (e.g., 0054, 0055) without any success
This thread was automatically locked due to age.