HTTP/S malware blocked / Sophos UTM

Hello,

Can me somebody help me out?

Thx.

Best regards

Can you post more details up? Where are you seeing this? Screenshot??

Sure, you will see two printscreen.

1. Name: excutive Report: The picture show was written in the weekly executiv report from 2017/08/06

2. Name: webfilter_report: Under Logging / Reporting -> Web Protection

Thank you for the help.

Best regards

The details are in the web filtering log file.   Go to View Log Files... Search.   Choose the Web Filterung logs snd a date range.   Search for"malware"

If that fails, download tne logs and search in a text editor.   On Eindows, you will need to download 7zip (free) to unpack the .gz file format.

Hi DouglasFoster,

Thank you for the replay.

I did this already but I can't find something in the log files (with the search "malware"). What's going on? How can i figure out?

Thank you for your help.

Best regards

I answered zeus1976 in the German Forum.  The trick is that it's:

zgrep 'categoryname="Malicious Sites"' /var/log/http/2017/08/* | grep -oP 'srcip=".*?"' |sort -n|uniq -c|sort -n

-or-

Cheers - Bob

I answered zeus1976 in the German Forum.  The trick is that it's:

zgrep 'categoryname="Malicious Sites"' /var/log/http/2017/08/* | grep -oP 'srcip=".*?"' |sort -n|uniq -c|sort -n

-or-

Cheers - Bob