It is requested that it be recorded in the log when the monitoring of snort does the time-out.1 voteAwaiting reply from Submitter · AdminAlan (Sr. Product Manager, Sophos Features & Ideas Laboratory) responded
Thanks for sharing your ideas with us. I wanted to get some clarification though, because it’s not clear what this request is asking for. The IPS engine doesn’t have any sort of timeout value that would cause an event to need to be logged.
If you mean that when IPS causes a session to timeout because it has discarded packets, that this should be logged, but this is exactly what IPS does by default. Can you clarify what additional behavior you’re asking for?
Thanks again for sharing.
Filtered computers get mapped public IP when browsing, rather than default IP of UTM internet interface.
Filtered computers get mapped public IP when browsing, rather than default IP of UTM internet interface. Currently, filtered machines always get the public IP of the UTM internet interface right now. Only unfiltered machine actually get the public IP NAT'd to them.1 vote
It would be very beneficial to have some diagnostic tools that can be used either from the UTM or seperately in order to obtain status information from the AP's regarding, current usage, load etc.3 votes
Hi Benjamin, what diagnostic tool or information would you like to obtain?
- Don't see your idea?