Advisory: Support Portal Maintenance. Login is currently unavailable, more info available here.

XG Firewall v18 MR-3: Feedback and experiences

Hi all,

Shall we start this new thread with the looks and feels of XG v18 MR-3?

community.sophos.com/.../xg-firewall-v18-mr3

Parents
  • Something odd with Log Viewer parsing for Source IP filter.  Attempted to filter using SRC IP Starts with and value 1.  Results were *1. (wildcard anything 1. wildcard).  To my thinking, that is not an IP starts with filter.

  • Hi,

    I am not sure I understand what you are asking, please post some screenshots of your logviewer for better understanding.

    Ian

    I think you are saying that when using filters on logviewer with a source IP address starting with 1, nothing is returned, if so your are correct and that would appear to be a bug because if you filter on destination IP address starting with 1 or *1 or 1* you are returned  results. My networks have 10 and 192 series IP address ranges as well as the external interface at the moment.

     
    V18.0.x - e3-1225v5 6gb ram on 4 port MB with 2 x APX120 - 20w. 
    If a post solves your question use the 'This helped me' link.
  • Not exactly.  Simply that IP SRC filter "Starts With" is not referencing the beginning of an IP address at all.  It takes the search query entered and returns values which do not start with that query, but have that query somewhere in it.  For IP addresses, searching for an IP address with beginning octect of 1, will also reference and IP address such as "148.1.2.3" because it finds "1.".  Again, specifically, its not the start of an IP address so somewhat misleading.  Erroneous wildcard prefix perhaps. (Acts as a "Contains" filter type)

Reply
  • Not exactly.  Simply that IP SRC filter "Starts With" is not referencing the beginning of an IP address at all.  It takes the search query entered and returns values which do not start with that query, but have that query somewhere in it.  For IP addresses, searching for an IP address with beginning octect of 1, will also reference and IP address such as "148.1.2.3" because it finds "1.".  Again, specifically, its not the start of an IP address so somewhat misleading.  Erroneous wildcard prefix perhaps. (Acts as a "Contains" filter type)

Children
No Data