Global Enable/Disable Switch

Blue Coat SGOS 4.x Upgrade Guide

In SGOS 4.x, you can enable or disable access logging on a global basis, both through the Management Console (Access Logging>General>Global Settings) and the CLI.

When logging is disabled, that setting overrides both policy and logging configuration. When access logging is enabled, policy settings override the access logging configuration.

Note: Access-log uploads are not affected by the global enable/disable switch; disabling access logging does not disable the ability to upload existing log files.

On new systems, by default, access logging is disabled, but certain protocols are configured to use specific logs. When access logging is enabled, logging begins immediately for all configured protocols.

If you are upgrading your system, your existing protocol configurations are preserved and access logging is enabled by default so that logging will continue as previously configured. Protocols new in SGOS 4.x are set to have a default log of none in this case.

Note: If you do not have a license for bandwidth management, access log uploads will not be bandwidth limited, even if they were bandwidth-limited in SGOS 3.x.

Certain protocols now have logs assigned to them by default. The defaults can be changed.

Note: Protocols are not associated with a log by default upon an upgrade. They are only associated with a default on new SGOS 4.x systems.:

Table 3.1: Default Logs and Protocols

Protocol	Log

Endpoint Mapper	main
FTP	main
HTTP/HTTPS	main
ICP	none
Instant Messaging	im
Peer to Peer	p2p
Real Media/QuickTime	streaming
SOCKS	none
TCP Tunneling	main
Telnet	none
Windows Media	streaming

New CLI Commands

SGOS#(config access-log) enable

SGOS#(config access-log) disable

Document References

Chapter 20, “Access Logging,” in the Blue Coat ProxySG Configuration and Management Guide