Re: [FW-1] Destination Column of Log Viewer

[Patrick Lotti <Patrick.Lotti@FW1-NOSPAMENERGIS-ISION.COM>]

Hi,

you have two options:
1) Display only the domain, keeping the firewall as fast as it is now.
2) Displaying the full url, making the firewall load a little higher.


1) This will NOT display the URL but the domain in the destination colum.
Log Viewer -> Select -> Options
 [x] Resolve Adresses

Policy Editor:
 Add a rule to allow the firewall to acess your DNS server(s)

Makes the log viewer really slow (at least in some cases).


2) Display the URL in the last column:
Policy Editor:
 Create a URI, matching everything: Policy Editor -> Manage -> Resource
  Match: [x] http, [x]get+head+post+put, Host: *, Path: *, Query: *

 Add/modify the http allow rule: http with resource, long logging.

Regards,
Patrick

As far as I know

"Arthur Tunggul Siahaan@JKT@TP" wrote:
>
> Hi there,
>
> I have a request from my boss regarding the Log Viewer.
> How to set Log Viewer so that the Destination Column displays the URL
> instead of IP address?
>
> Anybody can help?

=================================================
To set vacation, Out Of Office, or away messages,
send an email to LISTSERV@lists.us.checkpoint.com
in the BODY of the email add:
set fw-1-mailinglist nomail
=================================================
To unsubscribe from this mailing list,
please see the instructions at
http://www.checkpoint.com/services/mailing.html
=================================================
If you have any questions on how to change your
subscription options, email
fw-1-owner@ts.checkpoint.com
=================================================