cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
1023
Views
0
Helpful
3
Replies

Change the Host name which is being reported in the WSA logs

PaulTThomas
Level 1
Level 1

I have a WSA setup with 3 interfaces set up:

 

P1, P2 and M1

 

Users browse to P1 successfully, however, I have noticed in the logs that the HOST: is M1, rather than P1.

 

Is there any way to change this.

 

Thanks in advance.

3 Replies 3

balaji.bandi
Hall of Fame
Hall of Fame

Can you post example Logs to Look ?

 

BB

***** Rate All Helpful Responses *****

How to Ask The Cisco Community for Help

Hi Balaji,

 

When I do a web tracking report, here is a snippet of what I see

 

URL CATEGORY: bypass stuff
DESTINATION IP: 189.172.201.181 HOST: proxy1 (10.10.1.1)

 

It is configured as follows:

 

M1: 10.10.1.1

P1: 10.10.1.2

P2: 172.12.1.1

 

users browse to 10.10.1.2:8080 so I would expect this IP to be logged onto the logs

balaji.bandi
Hall of Fame
Hall of Fame

i would like to see the Logs generated by WSA - can you able to post that please.

 

go got comand level

> grep

>1

 

browse and post the logs

BB

***** Rate All Helpful Responses *****

How to Ask The Cisco Community for Help

Getting Started

Find answers to your questions by entering keywords or phrases in the Search bar above. New here? Use these resources to familiarize yourself with the community: