Create a Post
cancel
Showing results for 
Search instead for 
Did you mean: 
Antonis_Hassiot
Contributor

How can I see what files my users download from the internet on 77.30

Is there a way to see what files get downloaded from the internet? I tried to run a report using SmartReporter, but it doesn't show much. The report is under Predefined->Anti-Virus and AntiMalware Blade-> Scanned file types

Otherwise logging is enabled in Threat Prevention rules. When I search using .cab in SmartLog I can see a large number of blocked entries but not much Detected. Also when I search for .pdf I only get stuff under URL Filtering. 

10 Replies
PhoneBoy
Admin
Admin

Is HTTPS Inspection enabled?

0 Kudos
Reply
Antonis_Hassiot
Contributor

Yes it is.

0 Kudos
Reply
PhoneBoy
Admin
Admin

How are you allowing the traffic?

The traffic should match an Application Control rule and be logged with Extended logging to ensure all URLs accessed are captured.

0 Kudos
Reply
Antonis_Hassiot
Contributor

I have now enabled Extended Logging on all Application Control/URL Filtering Allow rules. I will let you know once I have some new logs.

0 Kudos
Reply
Antonis_Hassiot
Contributor

I downloaded file KX-NT_DT_UT_series_brochure_en.pdf under Resources in the following page:

Business Digital Telephone | Panasonic North America - Canada 

When searching for: KX-NT_DT_UT_series_brochure_en.pdf in SmartLog, no logs come up.

0 Kudos
Reply
Antonis_Hassiot
Contributor

Checking sometime later, I can now see the downloaded .pdf file. 

I wonder if this can be reported somehow. e.g. type of files mostly downloaded or virus checked. 

0 Kudos
Reply
PhoneBoy
Admin
Admin

Hm... Kfir Dadosh‌?

0 Kudos
Reply
Antonis_Hassiot
Contributor

Any more comments from Dameon or Kfir?

0 Kudos
Reply
Kfir_Dadosh
Employee Alumnus
Employee Alumnus

Do you have SmartEvent? Standalone or distributed?

Can you install R80.10 version?

Can you share the log card of the downloaded file?

0 Kudos
Reply
Antonis_Hassiot
Contributor

We have standalone SmartEvent.

Cannot immediately install 80.10 but we want to do so in the next quarter.

log card

0 Kudos
Reply