Proxy port information in reporter

Products

• Reporter-S500
• Reporter-VA
• Reporter

Issue/Introduction

Requirement is to fetch reports for connection made to proxy port.

Port 8080 for example.

Resolution

By default access logs does not note Proxy-Port information however we can configure a costume log format.

s-port 

First you will need add 's-port ' to access log format, Once the new format is save proxy will start recording proxy port information in access logs. 
Note this will not applied any old access logs , only new access logs will have information.

Ref- https://techdocs.broadcom.com/content/dam/broadcom/techdocs/symantec-security-software/web-and-network-security/proxysg/common/LogFieldsSubs.pdf

Next Proxy would forward these logs to configured reporter. 

In reporter you need to configure custom log field for ' s-port '

https://techdocs.broadcom.com/us/en/symantec-security-software/web-and-network-security/reporter/10-5/Administration_2/Customize_Configurations_10/editdb.html

Once you reload the database , Reporter would start recording new custom log field in this database. 

You can add custom log field in full detail log report. 

 

After sometime , once access logs with new format are reporter you can also create custom reports for proxy port.