Description URL

[HristoGrigorov]

I noticed in SmartConsole (R81 550) logs you attempt to provide Description URL:

Strictly speaking this is not an URL because as you know:

Every HTTP URL conforms to the syntax of a generic URI. The URI generic syntax consists of a hierarchical sequence of five components:

URI = scheme:[//authority]path[?query][#fragment]

So, kindly fix it 😉

[Tomer_Noy]

Can you please give a specific example of a log in which you see this?

It's OK to redact some fields, but I'd like to see the log type, blade and context to identify which code generates this value.

Also, you mentioned R81. Do you see a change of behavior from previous versions?

[HristoGrigorov]

@Tomer_Noy It is in all logs generated by IPS blade for both for Detect and Prevent actions:

I am not 100% sure but I think exact same issue is in R80.40. 

[Tomer_Noy]

Thanks. I'll take this feedback with the IPS team.

[Diego_dg]

Hello, I was looking for a explanation of the "Description URL" field and I found this thread. Please, is there any conclussion about this field? is it a detailed explanation of the protection? where can be found this HTML page? best regards

[Itzel_Gtz26]

Hello

Did you find the explanation of this field?

[HristoGrigorov]

No, not really. I even asked ChatGPT but it doesn't know anything about it either. So, still a mystery to me.

[karni]

When i use kdebug +ips to see some logs there is Field named f_name that matches description url

log: ips_protected_action:f_name =TLS12_0 == TLS Version .1.2 description url