robk Posted February 11, 2021 Posted February 11, 2021 We thought we had Smoothwall Cloud filter up and running, users and filtering is working, but not the logs going back into our on prem boxes. The diagnostics look like this. { "copiedAt": "Thu, 11 Feb 2021 19:31:58 UTC", "license": [ "cldflt", "core" ], "connection": "connected", "filterMode": "Mode 2", "policyName": "46131d497476169a8c4038895314bfe685a75c258c4ae3127f2a573bfb676e65", "generatedEpoch": "1612990801", "generatedDatetime": "Wed, 10 Feb 2021 21:00:01 UTC", "blocklistVersionDatetime": "Thu, 11 Feb 2021 03:45:03 UTC", "blocklistVersionEpoch": "1613015103", "lastSentLogs": "never", "username": "REDACTED", "ipAddressPublic": [ "REDACTED" ], "ipAddressPrivate": [ "10.0.0.114" ], "directoryGroups": [ "ChallengeDG (Group)", "CDMResources (Group)", "Finance Users (Group)", "MIS Transition (Group)", "CDMNAS-users (Group)" ], "mappedGroups": [ "Network Administrators", "Staff" ], "provisioningError": "Smoothwall 1.0.22310" } This is after an hour or so from hitting a blocked page, so would expect the logs to be uploaded. Is that provisioningError just the version no or does it tell us something?
ibpalle Posted February 12, 2021 Posted February 12, 2021 Diagnostics look alright as you show. ProvisioningError message is just for version number. Logs are delayed - an hour is what I think is the reporting interval for uploading to the cloud, then it has to be retrieved by the on-prem and indexed so should be present after 90m max.
robk Posted February 13, 2021 Author Posted February 13, 2021 We are finding that the logs never appear to be sent, even after 3-4 hours.
Recommended Posts
Create an account or sign in to comment
You need to be a member in order to leave a comment
Create an account
Sign up for a new account in our community. It's easy!
Register a new accountSign in
Already have an account? Sign in here.
Sign In Now