All logs deauthorize

[Exonix]

Hello,

we are still using r77.20 and have got a problem with logs: since 28.02.2020 all logs have action "deauthorize" and all logs files are not bigger than 50KB. I've checked already the disk free space - 20GB are still avaliable. How can I fix it?

Thank you in advance.

[PhoneBoy]

Hi, on what appliance?
Screenshot showing what you’re talking about.

[Exonix]

Hi, yes on the appliance shown in the screenshots (for some reason I don't see screenshots in my message, but as you mentioned the screenshot, apparently only admins can see it. I've attached it again for everyone)

[PhoneBoy · Accepted solution]

You didn't attach the screenshot to the original message, otherwise I could definitely see it as an admin 🙂
The "Deauthorize" message is coming from Endpoint Security on Demand (ESOD), which is related to Mobile Access.
It generally means someone is trying to log into the gateway and is failing the ESOD check.

If you're not seeing other traffic logs, perhaps a cprestart (requires an outage) will restore normal logs?
Otherwise, since you're on a long unsupported version, I recommend upgrading to a supported release.

[Exonix]

Thank you, we will restart it when possible. I will update you

[Exonix]

Hello. Restart after update has helped.

[Exonix]

Good day,

is there any update?