Proxies Are Sending Truncated Access Logs via SCP

Products

• ProxySG Software - SGOS
• Cloud Secure Web Gateway - Cloud SWG

Issue/Introduction

Proxies configured to send access logs into hosted reporting via SCP.

In Cloud SWG, administrators are seeing a small but consistent number of truncated access log files uploaded from on prem proxies using SCP.

All the truncated files came from an SG with the version SGOS 7.3.18.3.

It also appear that the size of the failed uploads are all divisible by 16K exactly.

Environment

Hosted reporting.

Proxy access log upload using SCP to Cloud SWG.

Cause

Product Defect.

Resolution

Fixed in SGOS updates in 7.3.28 and 7.4.14 code bases.

A workaround exists for SCP to set the remote-size to 0m which causes the SCP client to upload everything that we have in one shot. With remote-size 0, the gzip files received were correct and complete in 7.3.18.3.