topic Re: All logs deauthorize in Firewall and Security Management

All logs deauthorize

Exonix — Thu, 01 Jul 2021 16:08:45 GMT

Hello,

we are still using r77.20 and have got a problem with logs: since 28.02.2020 all logs have action "deauthorize" and all logs files are not bigger than 50KB. I've checked already the disk free space - 20GB are still avaliable. How can I fix it?

Thank you in advance.

Re: All logs deauthorize

PhoneBoy — Thu, 01 Jul 2021 20:19:52 GMT

Hi, on what appliance?
Screenshot showing what you’re talking about.

Re: All logs deauthorize

Exonix — Fri, 02 Jul 2021 08:14:02 GMT

Hi, yes on the appliance shown in the screenshots (for some reason I don't see screenshots in my message, but as you mentioned the screenshot, apparently only admins can see it. I've attached it again for everyone)

Re: All logs deauthorize

Exonix — Mon, 12 Jul 2021 10:22:21 GMT

Good day,

is there any update?

Re: All logs deauthorize

PhoneBoy — Mon, 12 Jul 2021 23:47:06 GMT

You didn't attach the screenshot to the original message, otherwise I could definitely see it as an admin 🙂
The "Deauthorize" message is coming from Endpoint Security on Demand (ESOD), which is related to Mobile Access.
It generally means someone is trying to log into the gateway and is failing the ESOD check.

If you're not seeing other traffic logs, perhaps a cprestart (requires an outage) will restore normal logs?
Otherwise, since you're on a long unsupported version, I recommend upgrading to a supported release.

Re: All logs deauthorize

Exonix — Tue, 13 Jul 2021 07:56:31 GMT

Thank you, we will restart it when possible. I will update you

Re: All logs deauthorize

Exonix — Thu, 04 Nov 2021 13:13:53 GMT

Hello. Restart after update has helped.