SRX

last person joined: yesterday 

Ask questions and share experiences about the SRX Series, vSRX, and cSRX.
  • 1.  SRX logging : URL

    Posted 08-30-2011 11:33

    I am searching a way to add URL in my SRX logs.

     

    I read that web filtering license is needed. 

    Is there anything to add in configuration to activate it? 

    In which way URL are added into RTLog? Can I have an example from one?

     

    Thanks,

     

    Sahoc

     

     

     

     



  • 2.  RE: SRX logging : URL
    Best Answer

    Posted 08-30-2011 14:20

    Here is an example of a log record for a permitted web filter request against this URL:

     

    http://www.coffer.com/mac_find/?string=00%3A18%3A8b%3A43%3Ab2%3Ab3+

     

    <30>1 2011-08-30T15:02:09.217-06:00 my-srx-hostname utmd 1125 WEBFILTER_URL_PERMITTED [junos@2636.1.1.1.2.36 source-address="xxx.xxx.xxx.xxx" source-port="52863" destination-address="72.47.228.79" destination-port="80" name="N/A" error-message="by other category" profile-name="my-webfilter-profile" object-name="www.coffer.com" pathname="/mac_find/?string=00:18:8b"] WebFilter: ACTION="URL Permitted" xxx.xxx.xxx.xxx(52863)->72.47.228.79(80) CATEGORY="N/A" REASON="by other category" PROFILE="my-webfilter-profile" URL=www.coffer.com OBJ=/mac_find/?string=00:18:8b

    Juniper do have evaluation licenses to try some of these features out on your own SRX.



  • 3.  RE: SRX logging : URL

    Posted 08-31-2011 09:33

    Thank you very much markpr for the explanation and the example.

     

    So what I saw here is wrong about adding URL in RTLog, you must get it with WEBFILTER.

     

    I plan to try the evaluation license on my SRX.