03-23-2017 01:27 PM
Hello All,
I have case where in client is having set up the user-id without agent on DC. As per the document says that with this set up the only protection feature available is "Use IP User Mapping" under URL-filtering.
I am seeing that it is working partially. When I test the same with log in page on zoom, I am seeing that the URL log shows that the credentials detected however when I do the same test with could.sophos.com it is not showing the credentials detected tick. Both the time the sessions are getting decrypted. Can you please let me know what all logs that I can check for the same ? as the following document shows the logs to be checked when we have agent installed on DC :
12-18-2017 09:57 PM
There is a note "The firewall automatically skips checking credential submissions for App‐IDs associated with sites that have
never been observed hosting malware or phishing content to ensure the best performance even if you enable checks
in the corresponding category. The list of sites on which the firewall will skip credential checking is automatically
updated via Application and Threat content updates."
in admin guide under Set Up Credential Phishing Prevention topic but not sure this is the reason or log which shows the reason.
with regards,
Ram
Click Accept as Solution to acknowledge that the answer to your question has been provided.
The button appears next to the replies on topics you’ve started. The member who gave the solution and all future visitors to this topic will appreciate it!
These simple actions take just seconds of your time, but go a long way in showing appreciation for community members and the LIVEcommunity as a whole!
The LIVEcommunity thanks you for your participation!
