cancel
Showing results for 
Search instead for 
Did you mean: 
jont717
Level 12

Log destination IP address

Jump to solution

Is there anyway to log destination IP addresses?

We just had our company Internet crawl to a halt most of the day because of Adobe downloads.  We had the IP addresses it was hitting, but we were unable to find them in any of the web gateway logs because they log URLs?  This caused out efforts to find the problem take longer than needed.

Can we have it log destination IP address too and not just the URL??

Web Gateway 7.0.2.2

0 Kudos
1 Solution

Accepted Solutions
McAfee Employee

Re: Log destination IP address

Jump to solution

You can indeed add that to the access log, but keep in mind if you are using Web Reporter, that you need to update the log file header to match what the actual format is. (the header and your actual log format are currently independent of each other)

See screenshots for what I mean.

sever_ip.png

sever_ip2.png

Hope it helps!

~Jon

0 Kudos
4 Replies
McAfee Employee

Re: Log destination IP address

Jump to solution

URL.Destination.IP is your friend.

As far as adobe updates, the URL for adobe updates typically matches on:

!ar(mdl|download).adobe.com/pub/adobe/
!swupdl.adobe.com/updates/

Best,

Jon

0 Kudos
jont717
Level 12

Re: Log destination IP address

Jump to solution

Okay cool.  Can this be applied to the access.log?  Or will I have to make a new log file? (i really do not want to do that)

Our updates were hitting armdl.adobe.com

As soon as we put that in the Global Block list, the internet came back to life.

Thanks Jon.

0 Kudos
McAfee Employee

Re: Log destination IP address

Jump to solution

You can indeed add that to the access log, but keep in mind if you are using Web Reporter, that you need to update the log file header to match what the actual format is. (the header and your actual log format are currently independent of each other)

See screenshots for what I mean.

sever_ip.png

sever_ip2.png

Hope it helps!

~Jon

0 Kudos
jont717
Level 12

Re: Log destination IP address

Jump to solution

Thanks Jon, this works great!

0 Kudos