topic Re: Empty "File URL" in "Data filtering" in General Topics

Empty "File URL" in "Data filtering"

AMoretti — Thu, 15 Nov 2018 10:50:55 GMT

Hi,

I applied the default "basic file blocking" profile to the policy that allows users to access the Internet.

In the "Data Filtering" monitor I can see few files being blocked (EXE files for example), but I can't see the full URL of that file (the "File URL" column is all blank).

The goal is to understand if the root URL can be white-listed.

Could you please help ?

Thank you

Alessio

Re: Empty "File URL" in "Data filtering"

OtakarKlier — Thu, 15 Nov 2018 17:40:25 GMT

Hello,

In the Unified logs view you can add the URL column by howvering your mouse over any of hte fileds and waiting for the down arrow, then just follow the path. Another thing to look at would be the maginfying glass icon on the far left of the logs, those will show the different parts of hte session.

Hope that helps.

Re: Empty "File URL" in "Data filtering"

AMoretti — Fri, 16 Nov 2018 10:01:09 GMT

Hi Otakar,

unfortunately, none of the proposed solutions worked: I am still seeing empty columns.

Thank you !

Re: Empty "File URL" in "Data filtering"

OtakarKlier — Fri, 16 Nov 2018 16:07:19 GMT

Hello,

Sorry about that, after you replied I check my logs and saw the same thing. Since you are looking for safe domains, I would make sure you have the following enabled:

URL Filtering

Wildfire

AV/Threat

If all those are configured properly then probably the domain is most likely safe.

Hope that helps.

Re: Empty "File URL" in "Data filtering"

Axel_Thirud — Mon, 10 Feb 2020 11:49:55 GMT

old post, but it appeared first in my google search for this issue

If you disable the "Log container page only" setting under the profile(s) you use under Objects - Security Profiles - URL Filtering you should see the File URLs in the Data filtering logs. This will also cause a substantial increase in URL filtering logs...