Cisco Cisco Web Security Appliance S690 Guía Del Usuario
18
S A W M I L L F O R I R O N P O R T 7 . 3 . 3 U S E R G U I D E
K N O W N I S S U E S A N D L I M I T A T I O N S
Sawmill for IronPort is unstable in VMWare Environments
Sawmill for IronPort is very unstable in VMWare Environments.
At this time Sawmill is not officially supported for VMWare environments.
At this time Sawmill is not officially supported for VMWare environments.
[Defect ID: 67818]
Sawmill for IronPort Incorrectly Reports CONNECT Log Entries
Page view identification logic was modified in 7.3.2. As a result, in 7.3.2, some log lines for
HTTPS CONNECT request that were not identified as page view previously, may be counted
as page view against an '(empty)' domain. Summarized Logs report will show the log lines
that are identified as page views.
HTTPS CONNECT request that were not identified as page view previously, may be counted
as page view against an '(empty)' domain. Summarized Logs report will show the log lines
that are identified as page views.
[Defect ID: 67385]
Disabling the Rewrite URL Feature Causes Sawmill for IronPort to Stop Functioning
Properly
Properly
Disabling the Rewrite URL feature causes Sawmill for IronPort to stop functioning properly
and throws a ‘Running out of Memory’ error.
and throws a ‘Running out of Memory’ error.
Workaround: Do not disable the ReWrite URL filter in Sawmill for Ironport plug-in. The
Rewrite URL feature must remain enabled.
Rewrite URL feature must remain enabled.
[Defect ID: 54042]
Multiple Log Formats in Same Directory Not Supported
If the log directory contains both logs in W3C format and logs in Squid format, reports may
display incorrect data. Workaround: Avoid mixing log formats in the log directory; put the
W3C logs in a separate directory. Sawmill for Cisco IronPort officially supports the Squid
format.
display incorrect data. Workaround: Avoid mixing log formats in the log directory; put the
W3C logs in a separate directory. Sawmill for Cisco IronPort officially supports the Squid
format.
[Defect ID: 53890]
The Name Option When Filtering a URL Does Not Work on Sawmill for IronPort Version
7.3.1
7.3.1
The ‘Name’ option when filtering a URL does not work on Sawmill for IronPort version 7.3.1.
[Defect ID: 51352]
Sawmill for IronPort Throws Error Messages When You Import Empty Layer 4 Traffic
Monitor (L4TM) Log Files or Access Logs.
Monitor (L4TM) Log Files or Access Logs.
If you are attempting to rebuild the database and import empty access log files or empty L4TM
log files, Sawmill generates multiple error messages.
log files, Sawmill generates multiple error messages.
Workaround: Remove the empty log files, and try to rebuild the database again.
[Defect ID: 50946]
WSA_Sawmill.book Page 18 Tuesday, February 22, 2011 2:54 PM