cancel
Showing results for 
Search instead for 
Did you mean: 
Create a Post
Highlighted

Does Check Point support Web Browser Agent Logging?

We want to find Web Browser User Agent details in to the logging. I mean this info, picture below:

useragent.png

In the Application/URL Filtering logging events, I can see only "Web browser" name eg Chrome, but not the full Web Browser User Agent info.

Can we somehow log this in the rules or it is not supported feature? 

0 Kudos
5 Replies

Re: Does Check Point support Web Browser Agent Logging?

Hi Gareth_Kik,

I believe your best bet is extended logging on the relevant rules. Is that something you have put in place already?

Thanks.

0 Kudos

Re: Does Check Point support Web Browser Agent Logging?

Yes, it shows only what browser was used, for example "Chrome", that's all. No details regarding Web browser user agent.

0 Kudos
Employee+
Employee+

Re: Does Check Point support Web Browser Agent Logging?

I seem to recall the mobile security checkup report in SmartEvent leveraged something similar, perhaps look at the fields/filters it uses and dig into the logs for this detail.

I will revert after i've had a chance to check further myself but you may get to it before me.

Mobile Checkup Example.png

0 Kudos

Re: Does Check Point support Web Browser Agent Logging?

Any news? Maybe it is something that should do Web Security Gateway / Proxy server that is specific for URL filtering and not for NG Firewall. Can you comment?

0 Kudos
Employee+
Employee+

Re: Does Check Point support Web Browser Agent Logging?

I've reviewed some logs in my demo environment, the following Log card details may help...

 

Section: Application / Site
Fields: Client Type

Section: Web Traffic
Fields: User Agent, Client Type OS

 

User Agent.pngAndroid.png

0 Kudos