How to restrict internet access from Web Isolation ?

book

Article ID: 211342

calendar_today

Updated On:

Products

Web Isolation

Issue/Introduction

Uncheck System Configuration > Gateways > Internet to restrict internet access from Web Isolation(WI).


However, WI seems to be restart internet access after reboot(and power cycle).
How to completely restrict internet access from WI ?

Cause

WI is accessing for internet(feedback-report.services.fire.glass) to feedback fireglass_monit.log data.
This operation processed by Logs-Anonymizer service.
You can disable this behavior via "uncheck System Configuration > Gateways > Internet"
There is bug to disable Logs-Anonymizer service it will be re-enable by restart.
Engineer team investigating this by WI-512.

Environment

Release : 1.14

Component : Logs-Anonymizer service

Resolution

Workaround is re-disable Logs-Anonymizer service by below steps.

  1. Access web console
  2. Move System Configuration > Gateways then click edit button your defined gateway
  3. Scroll down to "Access" and check the Internet is uncheck.
  4. After check click "PUSH SETTINGS" button.

Additional Information

You can confirm stop the Log-Anonymizer service by command line console.
Please run "fgcli service status".

Attachments