Threat log Issue

Jessevu — Fri, 31 Mar 2023 09:35:10 GMT

Hi Team,

In monitor threat

we are getting URL column as blank.

We can see source address and destination address.

Can we get URL also in the logs for any actions of vulnerability protection?

Thx

Re: Threat log Issue

reaper — Fri, 31 Mar 2023 11:49:33 GMT

The threat logs will only populate the URL field if there's a url based vulnerability/threat. iIn other words, DNS security profile hits because there was a DNS lookup to a malicious domain

For 'regular' threats, additional URL information may be available from the url filtering logs associated with any web based connections, which you can see in the Detailed Log View

topic Threat log Issue in General Topics

Threat log Issue

Re: Threat log Issue