cancel
Showing results for 
Search instead for 
Did you mean: 
nurmi
Level 7
Report Inappropriate Content
Message 1 of 3

URL Reputation filter logging

Hi

I'm using McAfee Web Gateway 6.8.7

It seems that the reputation filter is logging in the /var/log/messages file.

Is there a way to make it log in to a dedicated file, posibly in the web gui.

I know that I can read the data from the messages file in to another file. But I think it is a bit foolish to spam the messages with the reputation filter logs.

Cheers

2 Replies
McAfee Employee jscholte
McAfee Employee
Report Inappropriate Content
Message 2 of 3

Re: URL Reputation filter logging

Hello Nurmi!

This is actually controlled by a setting in the GUI, you can find this under URL Filter > Web Reputation, if this is set to "Block & Log Reputation" then it will log to the /var/log/messages.

Putting this to a dedicated log on 6.x isnt the easiest, but you can just log "rep_level" in the access log, and it will be available there.

Let me know if this helps!

~Jon

nurmi
Level 7
Report Inappropriate Content
Message 3 of 3

Re: URL Reputation filter logging

Hi

Thanks for the answer.

Basically I knew these options. I was just wondering if there were a way to get a dedicated file.

I might try the access log approach, although if it will log all the access events then the log will get huge very fast.

Actually the only reason I need the rep-logs is to weed out some of the false positives it is giving us.

And I can always grep and feed the events from the messages log.

Cheers

More McAfee Tools to Help You
  • How-to: Endpoint Removal Tool
  • Support: Endpoint Security
  • Visit: Business Service Portal
  • More: Search Knowledge Articles
  • ePolicy Orchestrator Support

    • Download the new ePolicy Orchestrator (ePO) Support Center Extension which simplifies ePO management and provides support resources directly in the console. Learn more about ePO Support Center