Create a Post
cancel
Showing results for 
Search instead for 
Did you mean: 
Gareth_Kik
Participant

Does Check Point support Web Browser Agent Logging?

We want to find Web Browser User Agent details in to the logging. I mean this info, picture below:

useragent.png

In the Application/URL Filtering logging events, I can see only "Web browser" name eg Chrome, but not the full Web Browser User Agent info.

Can we somehow log this in the rules or it is not supported feature? 

0 Kudos
5 Replies
Nick_Doropoulos
Advisor

Hi Gareth_Kik,

I believe your best bet is extended logging on the relevant rules. Is that something you have put in place already?

Thanks.

0 Kudos
Gareth_Kik
Participant

Yes, it shows only what browser was used, for example "Chrome", that's all. No details regarding Web browser user agent.

0 Kudos
Chris_Atkinson
Employee Employee
Employee

I seem to recall the mobile security checkup report in SmartEvent leveraged something similar, perhaps look at the fields/filters it uses and dig into the logs for this detail.

I will revert after i've had a chance to check further myself but you may get to it before me.

Mobile Checkup Example.png

CCSM R77/R80/ELITE
0 Kudos
Gareth_Kik
Participant

Any news? Maybe it is something that should do Web Security Gateway / Proxy server that is specific for URL filtering and not for NG Firewall. Can you comment?

0 Kudos
Chris_Atkinson
Employee Employee
Employee

I've reviewed some logs in my demo environment, the following Log card details may help...

 

Section: Application / Site
Fields: Client Type

Section: Web Traffic
Fields: User Agent, Client Type OS

 

User Agent.pngAndroid.png

CCSM R77/R80/ELITE
0 Kudos

Leaderboard

Epsum factorial non deposit quid pro quo hic escorol.

Upcoming Events

    CheckMates Events