Open-AudIT

What's on your network?
It is currently Thu Apr 26, 2018 11:41 pm

All times are UTC + 10 hours




Post new topic Reply to topic  [ 10 posts ] 
Author Message
PostPosted: Thu Nov 24, 2016 7:44 pm 
Offline
Newbie

Joined: Tue Jul 16, 2013 7:36 pm
Posts: 8
Hi,

I have 2 subnets and a firewall in between.
10.1.2.x: open-audit server (linux based) installed.
10.20.3.x: Windows client PC which failed submit the audit result to server.

May I know which port should be released such that submission will be ok?
rioz :roll:


Top
 Profile  
Reply with quote  
PostPosted: Fri Nov 25, 2016 4:55 pm 
Offline
Newbie

Joined: Tue Jul 16, 2013 7:36 pm
Posts: 8
port 80 and 443 are opened in firewall but client audit result still can't submit to server.
Any advice?


Top
 Profile  
Reply with quote  
PostPosted: Mon Nov 28, 2016 2:48 pm 
Offline
Newbie

Joined: Tue Jul 16, 2013 7:36 pm
Posts: 8
One more finding. There is no error for result submission from client PC. But result can't be found in database/web after submission. How to enable more message/error message in result submission?


Top
 Profile  
Reply with quote  
PostPosted: Tue Nov 29, 2016 2:32 am 
Offline
Moderator

Joined: Fri Jul 20, 2007 8:27 am
Posts: 1254
If you're running an audit using the audit script on a Windows pc you can increase the output.

Code:
cscript audit_windows.vbs debugging=3

If you're discovering a device from the interface there is a debug checkbox.

Maybe one of those options can help diagnose the problem.


Top
 Profile  
Reply with quote  
PostPosted: Fri Feb 03, 2017 8:12 pm 
Offline
Newbie

Joined: Tue Jul 16, 2013 7:36 pm
Posts: 8
Below is the log from apache

10.87.10.201 - - [01/Feb/2017:17:51:05 +0800] "GET /open-audit/index.php/login/audit_my_pc HTTP/1.1" 200 326957 "http://10.39.81.100/open-audit/index.php/login/index" "Mozilla/5.0 (Windows NT 5.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/49.0.2623.112 Safari/537.36"
10.65.126.61 - - [01/Feb/2017:17:51:57 +0800] "POST /open-audit/index.php/system/add_system HTTP/1.1" 200 - "-" "Mozilla/4.0 (compatible; Win32; WinHttp.WinHttpRequest.5)"

It shows posting done without problem but there is no data in database. I notice that PC using 10.87 subnet to browse the web but it uses 10.65 subnet to post. Is it the main problem that data can't be stored in database? BTW, there is no error message in running the audit script.


Top
 Profile  
Reply with quote  
PostPosted: Sat Feb 04, 2017 5:26 am 
Offline
Moderator

Joined: Fri Jul 20, 2007 8:27 am
Posts: 1254
Probably the blessed subnets feature.


Top
 Profile  
Reply with quote  
PostPosted: Sat Feb 04, 2017 3:38 pm 
Offline
Newbie

Joined: Tue Jul 16, 2013 7:36 pm
Posts: 8
Do you mean I should add below in my case?

create network
name: 10.65.126.0/24

or both
name: 10.65.126.0/24
name: 10.87.10.0/24


Top
 Profile  
Reply with quote  
PostPosted: Tue Feb 07, 2017 7:35 am 
Offline
Site Admin
User avatar

Joined: Mon Jun 07, 2004 11:48 am
Posts: 1944
Location: Brisbane, Australia
Add both.

_________________
Support and Development hours available from Opmantek.
Please consider a purchase to help make Open-AudIT better for everyone.


Top
 Profile  
Reply with quote  
PostPosted: Tue Feb 07, 2017 5:54 pm 
Offline
Newbie

Joined: Tue Jul 16, 2013 7:36 pm
Posts: 8
Is it ok if I add 10.0.0.0/8? Any impact?


Top
 Profile  
Reply with quote  
PostPosted: Wed Feb 08, 2017 2:03 am 
Offline
Moderator

Joined: Fri Jul 20, 2007 8:27 am
Posts: 1254
Beyond the obvious impact of allowing all 10.* I don't think this will be a problem. You could also turn off the Blessed Subnets feature in the config.


Top
 Profile  
Reply with quote  
Display posts from previous:  Sort by  
Post new topic Reply to topic  [ 10 posts ] 

All times are UTC + 10 hours


Who is online

Users browsing this forum: No registered users and 2 guests


You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot post attachments in this forum

Search for:
Jump to:  
Powered by phpBB® Forum Software © phpBB Group