cancel
Showing results for 
Search instead for 
Did you mean: 
Highlighted

report Server access logs issue

Hi,

Iam facing issue while fetching Report server access logs.

 

Iam getting error logs as

 

[25/Jun/2019:16:55:04 +0530] "" 255.255.255.255 200 "GET http://1190426/20190625165504/53184324LERF_Issue.jpg,Application.Name:GESSLeave,MediaType.FromHeader... HTTP/1.1" "" "Unverified" "" 0 0 "" "" "0" ""

 

Please help me resolve 

1 Reply
AaronT
Level 8
Report Inappropriate Content
Message 2 of 2

Re: report Server access logs issue

logs with the destination 255.255.255.255 are for an invalid DNS entry that was requested.  If you look at the request, you see the domain was 1190426, which (without validating) does not resolve.

 

To prevent this in your access logs, put a rule that does a Stop Rule Set if the URL.Destination.IP matches 255.255.255.255.  I've attached what we have implemented in our Log Handler to prevent sending of those to our access logs.

 

2019-07-08_10-17-27.jpg

 

 

More McAfee Tools to Help You
  • Subscription Service Notification (SNS)
  • How-to: Endpoint Removal Tool
  • Support: Endpoint Security
  • eSupport: Policy Orchestrator