Web Security Services

Good afternoon

We have recently rolled out Symantec WSS. We cannot seem to find the answer to this question anywhere so I'm hoping someone on here with more hands on experience can help explain.

We have the agent enabled and we've had on a number of occasions where a user goes to a url and either gets a blank page or the hmmm, something went wrong.

We search in reporting but cannot find any entries in relation to what that user is trying to reach. We had iBoss prior and this would show all traffic flowing from a particular user, even if it was successful or not. Is there anything in WSS that does the same?

Basically we want to see all traffic information that is flowing from any unified agent at any given time.

Many thanks in advance.

Hi Beeker,

You can serch your website keywords or initials in the search box under report section or simply browse reports like web browsing per user or per site and apply some filters by adding criteria site - contains - your site key words. By doing all this even if you land up searching your website you won't get enough info for site behaviour.

Its better if you focous on different troubleshooting methods like wireshark logs etc.

You can download and install symdiag to diagnose issues with Unified Agent.

Although that "hmmm" page is a Chrome issue, not WSS. WSS will log all traffic that hits it but if it isn't getting to WSS it can't log it.

You can see the Full Log Details under Solutions > Overview > Report Center > and under the Log Detail reports > Full Log Details.

It won't show all the columns so you can choose which ones to add in.

there is the Unified Agent log file which sits locally on the client this will show details of issues that may not be seen in the WSS logs 

Dear Beeker,

If you are using UA you can able to view that reports on WSS portal directly after few hours.

Can you let me know while initail configuration of WSS portal what option you have selected for reporting ?