Create a Post
cancel
Showing results for 
Search instead for 
Did you mean: 
Niag
Explorer

Syslog for SMB device obfuscated

Hi,

I'm sending syslogs to an external syslog server from a 1120 with firmware R77.20.80

My issue if that both Application and URL blade fields are shown as ******

appi_name="******" app_desc="******" app_id="******" app_category="******" matched_category="******" app_properties="******" app_risk="******" app_rule_id="******" app_rule_name="******"

Any ideas how I can deobfuscate these logs?

 

 

0 Kudos
6 Replies
G_W_Albrecht
Legend
Legend

I would suggest to contact TAC - i never saw this issue with SMB devices, though...

CCSE CCTE CCSM SMB Specialist
0 Kudos
Pedro_Espindola
Advisor

You have to upgrade. On R77.20.87 there is a check box to obfuscate or not.

LogsObfuscated.PNG

 

0 Kudos
Niag
Explorer

The latest firmware I can find for the 1120 is R77.20.80

Was any later firmware compatable?

 

0 Kudos
PhoneBoy
Admin
Admin

No, R77.20.80 is considered the last compatible release.
The 1100 series was End of Sale in June 2017.
While I expect we will continue to fix bugs on the 1100 series until End of Support, we are not planning to release new software on the 1100 containing new features (which this effectively is).
0 Kudos
Niag
Explorer

Thanks for all the replies.

Is there any CLI kung fu that would enable this?

0 Kudos
PhoneBoy
Admin
Admin

Possibly, but I'm not aware of what it is offhand.
Might be worth a TAC case.
0 Kudos

Leaderboard

Epsum factorial non deposit quid pro quo hic escorol.

Upcoming Events

    CheckMates Events