Smoothwall audit logs

[timbo343]

Is there a way to run off Audit Logs on a Smoothwall as we have just had someone edit a policy Everyone Everywhere Always BLOCK!!

[StephenPink]

When I asked this, I was told it wasn't possible and they don't have audit logs... which was a bit of a shocker!

[timbo343]

When I asked this, I was told it wasn't possible and they don't have audit logs... which was a bit of a shocker!

 

Great!!

 

@tom_newton is there a way this can be done please as someone has been messing with our policies and completely f**ked them up!

[sigma]

Is there a way to run off Audit Logs on a Smoothwall as we have just had someone edit a policy Everyone Everywhere Always BLOCK!!

 

Yikes!

 

There's this:

 

https://www.edugeek.net/forums/internet-related-filtering-firewall/226451-smoothwall-admin-console-log.html#post1941532

[timbo343]

Yikes!

 

There's this:

 

https://www.edugeek.net/forums/internet-related-filtering-firewall/226451-smoothwall-admin-console-log.html#post1941532

 

Fortunately i've jumped on the Cloud portal and seen what the differences are and there is a system backup from this morning so will restore from that but that doesn't help with knowing who changed what on the Smoothwall.

 

The report section that was mentioned only shows which user logged into the smoothwall - funny enough both my techs logged in at the same time so finding it hard to pin it down to who did what!

[tom_newton]

On-prem does have some rudimentary logs for some actions - and I believe policy delete/create is one of them.. I think you have to fish around in the backend a bit. I will take a look, this is something nobody has poked around with since we moved cloudwards.

[timbo343]

On-prem does have some rudimentary logs for some actions - and I believe policy delete/create is one of them.. I think you have to fish around in the backend a bit. I will take a look, this is something nobody has poked around with since we moved cloudwards.

 

Ta. I'm not confident enough to fish around in the SSH of the Smoothwall but can see when policies were pushed to the cloud filter.

 

I'll just restore the filtering policies from last week.

[tom_newton]

Cloudflare blocks me from answering on here! I will email.

[mikes]

hmm I just made a change to on of our filter lists (ticked on a category to our ks4 list) but it doesn't seem to show up in the audit log. I only just did it though perhaps it takes time?

[tom_newton]

On cloud? Should show up straight away...

[mikes]

On cloud? Should show up straight away...

 

I can see things coming up in the audit log now. Will do some more testing next week though as it's part LEA I'm sure they will have it in hand. Apologies should have mentioned we are having smoothwall cloud installed by our LEA. We must have been using some on site one beforehand. (LEA manages it all). Must say I am impressed so far this is much better than what we had before. Before we had absolutely no idea what pupils did off site on their school chromebooks. Just had it mostly working today so going to have some V interesting reading from the non school IP section of the reports.