Not able move logs from reporter post-upgrade due to file permissions

Products

• Reporter-VA

Issue/Introduction

Environment :  

-- "Web Security Service(WSS)" logs downloaded from cloud will be placed local folder on report. Eg folder name - WSSCloudLogs 
-- After log is processed to database, WSS logs will be moved to different local folder Eg folder name  - WSSCloudLogDone

After upgrade reporter VA from 10.3.2.4 to 10.5.2.2" the moved logs have 440 permission and cannot be transferred out from "WSSCloudLogDone" folder using FTP client.

In older version of Reporter those files have 660 permission and had no such transfer issue.

Environment

Release : 10.5.2.2

Component : WSS logs downloaded to reporter

Cause

Reporter engineering bug ID is RPT-831 is filled for fixing the permissions and it would be taken up in the next development life-cycle for reporter.

Resolution

WORKAROUND:

We can setup different server to pull the WSS log using WSS SYNC API. Below document explain how-to.

https://knowledge.broadcom.com/external/article/171280/siem-integration-with-web-security-servi.html
https://portal.threatpulse.com/docs/sol/PDFBriefs/PDF_SyncAPI.pdf
 
-- Next setup a FTP server in the same server to serve the downloaded WSS log and reporter can pull them as normal FTP client. 

-- You can control permissions on that FTP server.