cancel
Showing results for 
Search instead for 
Did you mean: 
slizka
Level 7
Report Inappropriate Content
Message 1 of 5

Web Reporter pull logs from MWG

Jump to solution

Hi,

Is there some additional setting to enable the Web Reporter to pull logs from Web Gateway?

I've made account with permission to REST interface and enabled REST in UI settings of Web Gateway.

In Web Reporter I've added new log source, set collect log files from MWG 7.x, configured IP/TLS/username+password configured on MWG with access to REST interface, but when I try to Browse UUID, I'm getting error

"Unable to contact the Web Gateway server '10.10.10.35:4712'.  Please confirm that the server is running, and then try again." which is strange error because the MWG is on the same subnet and is reachable via browser from the Web Reporter server.

Can't figure out what might be wrong in my setup. Any suggestions?

Thanks.

Br. Ales

1 Solution

Accepted Solutions
McAfee Employee tpollok
McAfee Employee
Report Inappropriate Content
Message 4 of 5

Re: Web Reporter pull logs from MWG

Jump to solution

Which version of MWG are you using right now? There is an issue for MWG 7.5.2.8 and higher. You can check your server.log and if you see this message:

ERROR [securecomputing.smartfilter.common.core.util.httputil.SfHttpClient] IOException:

javax.net.ssl.SSLException: java.lang.RuntimeException: Could not generate DH keypair

If you see this message this article should help to solve this: McAfee KnowledgeBase - Could not generate DH keypair (Web Reporter fails to collect logs from Web Ga...

4 Replies
Highlighted

Re: Web Reporter pull logs from MWG

Jump to solution

Have you considered pushing the access log to WR instead? It's much more efficient that way.

The only difference between what the above guide dictates and what I'd recommend is you setup a separate log source on WR using each proxy's hostname. to accept incoming connections and set the password tot he same value for all the log source sources.

And in the access.log Autopush-setting, use %h as the logon name.

So for example, I have 2 proxies called mwg7-1 and mwg7-2.

Create a log source for each one:

And set the access.log setting on MWG to:

On the proxies, %h is substituted for the name of the proxy when the logs are pushed.

slizka
Level 7
Report Inappropriate Content
Message 3 of 5

Re: Web Reporter pull logs from MWG

Jump to solution

Hi, thanks, yes pushing works just fine, already using it, but that's not what I'm trying to do Let's call it curiosity, but I was trying to configure the pulling of logs directly from reporter.

Br. Ales

McAfee Employee tpollok
McAfee Employee
Report Inappropriate Content
Message 4 of 5

Re: Web Reporter pull logs from MWG

Jump to solution

Which version of MWG are you using right now? There is an issue for MWG 7.5.2.8 and higher. You can check your server.log and if you see this message:

ERROR [securecomputing.smartfilter.common.core.util.httputil.SfHttpClient] IOException:

javax.net.ssl.SSLException: java.lang.RuntimeException: Could not generate DH keypair

If you see this message this article should help to solve this: McAfee KnowledgeBase - Could not generate DH keypair (Web Reporter fails to collect logs from Web Ga...

slizka
Level 7
Report Inappropriate Content
Message 5 of 5

Re: Web Reporter pull logs from MWG

Jump to solution

Thanks, that was exactly the issue...

Running MWG 7.6.2.5 and can see that error in Web Reporter server.log. Following the KB the log pulling works as it should.

Br. Ales

More McAfee Tools to Help You
  • Subscription Service Notification (SNS)
  • How-to: Endpoint Removal Tool
  • Support: Endpoint Security
  • eSupport: Policy Orchestrator
  • Community Help Hub

      New to the forums or need help finding your way around the forums? There's a whole hub of community resources to help you.

    • Find Forum FAQs
    • Learn How to Earn Badges
    • Ask for Help
    Go to Community Help

    Join the Community

      Thousands of customers use the McAfee Community for peer-to-peer and expert product support. Enjoy these benefits with a free membership:

    • Get helpful solutions from McAfee experts.
    • Stay connected to product conversations that matter to you.
    • Participate in product groups led by McAfee employees.
    Join the Community
    Join the Community