 Re: Need your help in configuring reporting
Hi Ali,
What are "proxy1" and "proxy2"? Do all HTTP connections run through these (apparent) proxy servers? If so, do the proxies NAT the traffic?
That is my configuration and all SOURCE IP's are that of the proxy, as it should be, because everything hitting the firewall is coming from the proxy server IP address. I have my reporting system reading the proxy logs.
When you see ORIGIN, it means that is the device sending the logs to the SmartCenter. If you have multiple firewalls or routers sending logs, this is a way of filtering the logs to see what is coming from just that device.
HTH,
Ray |