Skip to content

[fortinet_fortiproxy]: update documentation #10098

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
pkoutsovasilis merged 5 commits into from
Jun 7, 2024
Merged

[fortinet_fortiproxy]: update documentation #10098

Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
5 commits
Select commit Hold shift + click to select a range
d7993cb
fix: update documentation
pkoutsovasilis Jun 7, 2024
1c94f94
fix: update PR number in changelog.yml
pkoutsovasilis Jun 7, 2024
15c1206
fix: discard sensitive log entries
pkoutsovasilis Jun 7, 2024
b31ae59
fix: update README.md
pkoutsovasilis Jun 7, 2024
2db456e
Add new generic logs
taylor-swanson Jun 7, 2024
File filter

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
4 changes: 2 additions & 2 deletions packages/fortinet_fortiproxy/_dev/deploy/docker/sample_logs/fortinet-fortiproxy.log
View file
Open in desktop
Original file line number Diff line number Diff line change
@@ -1,10 +1,10 @@
<189>date=2024-04-10 time=19:56:24 devname="TEST-PXY01" devid="FPXTESTPXY01" eventtime=1712771784416171955 tz="+0200" logid="0000000010" type="traffic" subtype="forward" level="notice" vd="KA" srcip=10.10.10.10 srcport=51452 srcintf="IAC-VPC-PXY" srcintfrole="lan" dstcountry="Ireland" srccountry="Reserved" dstip=67.43.156.13 dstport=443 dstintf="IAC-VPC-PXY" dstintfrole="lan" sessionid=433606097 service="HTTPS" proxyapptype="web-proxy" proto=6 action="accept" policyid=1 policytype="proxy-policy" poluuid="51b2f060-c5b8-51ee-1500-b85847801189" policyname="Default-Forward-Jubit" trandisp="snat+dnat" tranip=172.16.200.2 tranport=8091 transip=10.60.47.197 transport=6360 clientip=10.10.10.10 duration=6248 user="TESTUSER" group="JUSTID-INTERNET" wanin=6502 rcvdbyte=6502 wanout=2038 lanin=2038 sentbyte=2038 lanout=6502 appid=35944 app="Amazon.AWS_S3" appcat="Cloud.IT" apprisk="medium"
<189>date=2024-06-07 time=09:16:30 devname="TEST-PXY01" devid="FPXTESTPXY01" eventtime=1717769790749853000 tz="-0600" logid="0000000010" type="traffic" subtype="forward" level="notice" vd="root" srcip=10.10.0.2 srcport=64924 srcintf="internal" srcintfrole="lan" dstcountry="Canada" srccountry="Reserved" dstip=67.43.156.173 dstport=443 dstintf="external" dstintfrole="wan" sessionid=682182743 service="HTTPS" proxyapptype="web-proxy" proto=6 action="accept" policyid=1 policytype="proxy-policy" poluuid="19c3b994-9324-4bae-819d-01d068f09b5e" policyname="TEST-POLICY" trandisp="snat+dnat" tranip=172.16.0.67 tranport=5505 transip=172.16.1.6 transport=7680 clientip=10.10.0.2 duration=3203 user="TEST-USER" group="TEST-GROUP" wanin=5500 rcvdbyte=5500 wanout=3200 lanin=3200 sentbyte=3200 lanout=5500 appid=34365 app="TEST-APP" appcat="APP-CAT" apprisk="medium"
<189>date=2024-05-07 time=09:08:38 devname="TEST-PXY01" devid="FPXTESTPXY01" eventtime=1715098118357817763 tz="-0700" logid="0000000010" type="traffic" subtype="forward" level="notice" vd="root" srcip=10.0.0.3 srcport=34750 srcintf="port2" srcintfrole="lan" dstcountry="United States" srccountry="Reserved" dstip=67.43.156.130 dstport=443 dstintf="port1" dstintfrole="undefined" sessionid=1781818008 service="HTTPS" proxyapptype="web-proxy" proto=6 action="accept" policyid=1 policytype="proxy-policy" poluuid="27b09930-033d-51ef-0c72-6c1221a8d893" policyname="test-proxy" trandisp="snat" transip=10.0.128.2 transport=13846 clientip=10.0.0.3 duration=122 wanin=4566 rcvdbyte=4566 wanout=452 lanin=843 sentbyte=843 lanout=34487 appcat="unscanned" utmaction="block"
<189>date=2024-05-07 time=09:10:36 devname="TEST-PXY01" devid="FPXTESTPXY01" eventtime=1715098236741352145 tz="-0700" logid="0000000010" type="traffic" subtype="forward" level="notice" vd="root" srcip=10.0.0.3 srcport=60466 srcintf="port2" srcintfrole="lan" dstcountry="United States" srccountry="Reserved" dstip=67.43.156.130 dstport=443 dstintf="port1" dstintfrole="undefined" sessionid=1781818009 service="HTTPS" proxyapptype="web-proxy" proto=6 action="accept" policyid=1 policytype="proxy-policy" poluuid="27b09930-033d-51ef-0c72-6c1221a8d893" policyname="test-proxy" trandisp="snat" transip=10.0.128.2 transport=31298 clientip=10.0.0.3 duration=330 wanin=5386 rcvdbyte=5386 wanout=675 lanin=843 sentbyte=843 lanout=5839 appcat="unscanned" utmaction="allow"
<189>date=2024-05-07 time=08:53:21 devname="TEST-PXY01" devid="FPXTESTPXY01" eventtime=1715097201578825283 tz="-0700" logid="0000000013" type="traffic" subtype="forward" level="notice" vd="root" srcip=10.0.0.3 srcport=40946 srcintf="port2" srcintfrole="lan" dstip=67.43.156.142 dstport=443 dstintf="port1" dstintfrole="undefined" srccountry="Reserved" dstcountry="United States" sessionid=1781818007 proto=6 action="deny" policyid=2 policytype="policy" poluuid="595c071a-0bc3-51ef-1966-4c130f19e4e5" policyname="no-google" service="HTTPS" trandisp="noop" url="https://google.com/" agent="Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/115.0" duration=0 sentbyte=0 rcvdbyte=0 sentpkt=0 rcvdpkt=0 appcat="unscanned" crscore=30 craction=131072 crlevel="high" msg="Traffic denied because of explicit proxy policy"
<189>date=2024-05-09 time=06:25:02 devname="TEST-PXY01" devid="FPXTESTPXY01" eventtime=1715261101829329792 tz="-0700" logid="0000000013" type="traffic" subtype="forward" level="notice" vd="root" srcip=10.0.0.3 srcport=57748 srcintf="port2" srcintfrole="lan" dstip=67.43.156.126 dstport=443 dstintf="port1" dstintfrole="undefined" srccountry="Reserved" dstcountry="United States" sessionid=1781818022 proto=6 action="deny" policyid=2 policytype="policy" poluuid="7f573f0c-0e07-51ef-9204-df7d834bf3cd" policyname="url-filter-test" service="HTTPS" trandisp="noop" url="https://steampowered.com/" agent="Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/115.0" duration=0 sentbyte=0 rcvdbyte=0 sentpkt=0 rcvdpkt=0 appcat="unscanned" crscore=30 craction=131072 crlevel="high" msg="Traffic denied because of explicit proxy policy"
<189>date=2024-05-07 time=09:19:34 devname="TEST-PXY01" devid="FPXTESTPXY01" eventtime=1715098773638113952 tz="-0700" logid="0000000015" type="traffic" subtype="forward" level="notice" vd="root" srcip=10.0.0.3 srcport=36834 srcintf="port2" srcintfrole="lan" dstip=67.43.156.3 dstport=443 dstintf="port1" dstintfrole="undefined" srccountry="Reserved" dstcountry="United States" sessionid=1781818015 proto=6 action="start" policyid=1 policytype="policy" poluuid="27b09930-033d-51ef-0c72-6c1221a8d893" policyname="test-proxy" service="HTTPS" trandisp="noop" url="https://github.com/" agent="Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/115.0" duration=0 sentbyte=0 rcvdbyte=0 sentpkt=0 rcvdpkt=0 appcat="unscanned"
<189>date=2024-04-10 time=19:56:18 devname="TEST-PXY01" devid="FPXTESTPXY01" eventtime=1712771778239212444 tz="+0200" logid="0010000099" type="traffic" subtype="http-transaction" level="notice" vd="KA" srcip=10.10.10.10 dstip=67.43.156.13 tranip=172.16.200.2 clientip=10.10.10.10 scheme="https" srcport=51452 dstport=443 tranport=8091 hostname="qnl-play-fetch.s3.amazonaws.com" url="https://qnl-play-fetch.s3.amazonaws.com/" prefetch=0 policyid=1 sessionid=433606097 transid=33559030 reqlength=247 resplength=0 rcvdbyte=39 sentbyte=247 resptype="normal" user="TESTUSER" group="JUSTID-INTERNET" httpmethod="CONNECT" agent="Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/115.0" statuscode="200" rawdata="Time=71ms|Header-Host=qnl-play-fetch.s3.amazonaws.com:443" reqtime=1712771778 resptime=1712771778 respfinishtime=1712771778 duration=71 appcat="unscanned"
<189>date=2024-06-07 time=09:33:38 devname="TEST-PXY01" devid="FPXTESTPXY01" eventtime=1717770818783036000 tz="-0600" logid="0010000099" type="traffic" subtype="http-transaction" level="notice" vd="root" srcip=10.10.0.2 dstip=67.43.156.183 tranip=172.16.0.173 clientip=10.10.0.2 scheme="https" srcport=57783 dstport=443 tranport=5360 hostname="google.com" url="https://google.com/" prefetch=0 policyid=1 sessionid=370197373 transid=139874926 reqlength=250 resplength=0 rcvdbyte=40 sentbyte=250 resptype="normal" user="TEST-USER" group="TEST-GROUP" httpmethod="CONNECT" agent="Mozilla/5.0 (Linux; Android 10) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/99.0.4844.88 Mobile Safari/537.36" statuscode="200" rawdata="Time=50ms|Header-Host=google.com:443" reqtime=1717770818 resptime=1717770818 respfinishtime=1717770818 duration=50 appcat="APP-CAT"
<189>date=2024-05-07 time=08:53:21 devname="TEST-PXY01" devid="FPXTESTPXY01" eventtime=1715097201578875219 tz="-0700" logid="0010000099" type="traffic" subtype="http-transaction" level="notice" vd="root" srcip=10.0.0.3 dstip=67.43.156.142 clientip=10.0.0.3 scheme="https" srcport=40946 dstport=443 hostname="google.com" url="https://google.com/" prefetch=0 policyid=2 sessionid=1781818007 transid=1 reqlength=82 resplength=0 rcvdbyte=0 sentbyte=82 resptype="generated" httpmethod="CONNECT" agent="Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/115.0" statuscode="200" rawdata="Time=120ms|Header-Host=google.com:443" reqtime=1715097201 resptime=0 respfinishtime=1715097201 duration=120 appcat="unscanned"
<189>date=2024-05-07 time=08:53:21 devname="TEST-PXY01" devid="FPXTESTPXY01" eventtime=1715097201627718958 tz="-0700" logid="0010000099" type="traffic" subtype="http-transaction" level="notice" vd="root" srcip=10.0.0.3 dstip=67.43.156.142 clientip=10.0.0.3 scheme="https" srcport=40946 dstport=443 hostname="google.com" url="https://google.com/" prefetch=0 policyid=2 sessionid=1781818007 transid=1 reqlength=155 resplength=0 rcvdbyte=0 sentbyte=743 resptype="generated" httpmethod="GET" agent="Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/115.0" statuscode="403" rawdata="Time=0ms|Header-Host=google.com" reqtime=1715097201 resptime=0 respfinishtime=1715097201 duration=0 appcat="unscanned"
<189>date=2024-05-09 time=06:19:51 devname="TEST-PXY01" devid="FPXTESTPXY01" eventtime=1715260791218098006 tz="-0700" logid="0010000099" type="traffic" subtype="http-transaction" level="notice" vd="root" srcip=10.0.0.3 dstip=67.43.156.50 clientip=10.0.0.3 scheme="https" srcport=41458 dstport=443 hostname="adobe.com" url="https://adobe.com/" prefetch=0 policyid=1 sessionid=1781818020 transid=16777245 reqlength=80 resplength=0 rcvdbyte=0 sentbyte=80 resptype="generated" httpmethod="CONNECT" agent="Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/115.0" statuscode="200" rawdata="Time=56ms|Header-Host=adobe.com:443" reqtime=1715260791 resptime=0 respfinishtime=1715260791 duration=56 appcat="unscanned"
Expand Down
5 changes: 5 additions & 0 deletions packages/fortinet_fortiproxy/changelog.yml
View file
Open in desktop
Original file line number Diff line number Diff line change
@@ -1,4 +1,9 @@
# newer versions go on top
- version: "0.1.1"
changes:
- description: update documentation
type: bugfix
link: https://github.com/elastic/integrations/pull/10098
- version: "0.1.0"
changes:
- description: Initial draft of the package
Expand Down
Loading