About LCMember1664

Hi   I have various response pages configured to allow the user to click and send an email when hitting a blocked site.  The URL one works fine - user clicks continue, new email pops up with the following placed in the email : URL and user name.    For File blocking, I cannot get the URL to go in to the email, it's always the IP address instead that gets carried over.  Even using the exact same above URL HTML code/page, the URL doesn’t appear.   Code: <img src="xxx"> <h1>File Download Alert</h1> <p>*Our corporate disclaimer* Please click <a href="mailto:x.x@x.com?subject=File%20Download%20-%20Access%20Request&#58<url/>&body=File%20Download&#58%20<url/>%0AID&#58%20<user/>%0ABusiness%20Reason%20For%20Access&#58%20">here</a> to request access</p> <p><b>ID:</b> <user/> </p> <p><b>URL:</b> <url/> </p>   Email for URL: Subject - Web Site - Access Request:download.cnet.com/ BRI Blocked URL: download.cnet.com/ ID: domain\username Business Reason For Access:   Email for File Blocking: Subject - File Download - Access Request 250.18.203 BRI File Download: 34.250.18.203 ID: domain\username Business Reason For Access: ... View more

Hi I have successfully created a syslog regex filter to receive incoming Cisco ISE authentications.  However, I want to filter some log entries based on only receiving from a particular IP address range and exclude some logs with certain characters in the username. Has anyone successfully created this? My example would be (these are not my IP addresses or usernames, it's an example only); Receive log entries for IP range: 123 . 321 . 33-32. 1-254 eg: 123.321.32.12 - OK 123.321.33.10 - OK 123.222.1.2 - filter off 123.321.34.1 - filter off [I have tried...] - Framed-IP-Address=(123.\.321\.(3[2-3]\.[0-9]{1,3}) ---- Username exclude characters in the username, example I want to receive any username except one which has test in it:  domain\test-1234 i.e. domain\1234 - OK domain\test-1234 - filter off --- Thank you Steve ... View more