Last Modified: Jul 12, 2023
Known Affected Versions:
13.1.0, 126.96.36.199, 188.8.131.52, 184.108.40.206, 220.127.116.11, 18.104.22.168
Opened: Mar 14, 2018 Severity: 2-Critical
AVR does not send DNS statistics to external logs when analytics global setting usr-offbox is enabled, if the following security analytics settings are set to disable: -- collected-stats-internal-logging. -- collected-stats-external-logging.
DNS statistic are not sent to external log.
-- Security analytics settings collected-stats-internal-logging is disabled. -- Security analytics settings collected-stats-external-logging is disabled. -- Analytics global settings usr-offbox is enabled.
To work around this issue, perform the following procedure: 1. Provision ASM or AFM. 2. Run the tmsh command to set to enabled the security analytics setting collected-stats-external-logging. 2. Deprovision ASM/AFM.
AVR now publishes DNS statistics to external logs when usr-offbox is enabled, as expected.