NEO Web Control Diagnostics

Status

 
NEO settings: WebEnabled
neo_settings.neo_web_enabledEnabled
 
NEO settings: DUPDisabled
neo_settings.dup_enabledNot licensed (Disabled)
 
End User Manually Disabled Web Control?No
UI.csg.disabledYes | No
 

NEO Web Mode of Operation

 
Current ModePC
csg_supervisor.current_modeProxy Connect | Direct Connect | Fallback (open) | Fallback (close) | Fallback (safe)
 
Configured ModeAuto
csg_supervisor.policyAuto Switch | PCEP only | DCEP only
 
Configured Fall-back ModeSafe(open)
csg_supervisor.fallback_policySafe | Open | Close
 

NEO Web Mode of Operation - Decision Parameters

 
Direct Access to CSG ProxyOK
csg_supervisor.runtime.CSG_Proxy.statusTry to access an Internet a well-known web-site via CSG Proxy, result can be OK | Fail | Not Authorized
Direct Access to CSG Proxy time46 ms
csg_supervisor.runtime.CSG_Proxy.time 
 
Direct Access to Disposition ServiceOK
csg_supervisor.runtime.CSG_Disposition.statusTry to call directly to Disposition Service to get URL info for a well-known web-site, result can be OK, Fail, Not-Authorized
 
Direct Access to InternetOK
csg_supervisor.runtime.Internet.statusTry to access directly a well-known web-site, result can be OK, Fail
Direct Access to Internet time13 ms
csg_supervisor.runtime.Internet.time 
 

CSG policy Settings

 
Policy NameJustworks Web Filter
csg_supervisor.profile_nameThe current CSG policy that is assigned to this user
 
PCEP AuthOS:Mac;Bits:64bit;Platform:x64;User:juliuafraser-mac\juliuafraser,1;MachineID:juliuafraser-mac\10.26.197.230;LogonDomain:0;Context:7cec9b2968e82743a98fbc17f778d4bd-0;TZ:UTC-04:00;Settings-Hash:
csg.auth.pcepAuthentication parameters used for cloud security gateway proxy
 
DCEP AuthOS:Mac;Bits:64bit;Platform:x64;Context:7cec9b2968e82743a98fbc17f778d4bd-0;MachineID:juliuafraser-mac\10.26.197.230;User:juliuafraser-mac\juliuafraser,0;LogonDomain:0;TZ:00:00;Settings-Hash:0
csg.auth.dcepAuthentication parameters used for cloud disposition service
 
Current PAC url in usehttps://pac.webdefence.global.blackspider.com:8087/proxy.pac?p=fgvhs72h
pac_man.pcep.pac_url 
 
Current PAC in usecsg cloud config
pac_man.pcep.pac_url_originwhich PAC file is in use
 
Current PAC file Size7025 bytes
pac_man.pcep.pac_data.sizethe downloaded CSG PAC file (without any merges)
 
Configured PAC urlhttps://pac.webdefence.global.blackspider.com:8087/proxy.pac?p=fgvhs72h
pac_man.pcep.config.cloug_policy.pac_urlthe configured PAC received from DCEP management channel, it is CSG policy specific
 
Default PAC urlhttp://pac.webdefence.global.blackspider.com:8082/proxy.pac?p=fgvhs72h
pac_man.pcep.config.default.pac_urlthis is the default PAC url from the np_policy_tenant_specific
 
Allow end-user to disable Web Control?false
UI.csg.tray_icon_enabledAppear in the CSG policy (csg_config.db)
 

NEO Endpoint Settings

 
DUP 
neo_settings.dup_enabledIs DUP product enabled
 
WEB 
neo_settings.neo_web_enabledIs NEO Web enabled
 
Configure endpoint system proxytrue
neo_settings.set_system_proxyWhether or not to set NEO as an explicit local proxy on the endpoint
 
Proxy settings127.0.0.1:54450
system.proxy.value 
 
Perform SSL decryption on the endpointtrue
neo_settings.ssl_decryption_enabledwhen SSL decryption is disabled on the endpoint then DCEP cannot pass url-path and headers to disposition service
 
Inspect Web Traffic for Private Networksfalse
neo_settings.inspect_web_traffic_for_private_network 
 
IPv4 Private Network Ranges"10.0.0.0/8", "172.16.0.0/12", "192.168.0.0/16"
neo_settings.ipv4_exclude_network_ranges 
 
IPv6 Private Network Ranges"fd00::/8"
neo_settings.ipv6_exclude_network_ranges 
 

CSG Servers

 
Disposition Service Hostngep.blackspider.com
csg_config_manager.config.hostdisposition_server taken from np_policy_tenant_specific
 
CSG Proxy Hostwebdefence.global.blackspider.com
net_perf.config_pcep.proxy_hostswg_host_address taken from np_policy_tenant_specific
 
CSG Proxy Port for connectivity test8081
net_perf.config_pcep.proxy_portswg_host_address taken from np_policy_tenant_specific
 
Username for CSG proxy connectivity checkjuliuafraser-mac\juliuafraser,1
net_perf.config_pcep.usercurrent logged in user - can be local user or domain user
 
CSG account WScontext7cec9b2968e82743a98fbc17f778d4bd-0
net_perf.config_pcep.wscontextwscontext taken from np_policy_tenant_specific
 
PCEP AuthOS:Mac;Bits:64bit;Platform:x64;User:juliuafraser-mac\juliuafraser,1;MachineID:juliuafraser-mac\10.26.197.230;LogonDomain:0;Context:7cec9b2968e82743a98fbc17f778d4bd-0;TZ:UTC-04:00
csg.auth.pcep_healthAuthentication parameters used for cloud security gateway proxy
 

Disposition Service - Health & Performance Check

 
Performedevery 60 sec
Perform DCEP query - calling disposition service directly without considering any endpoint proxy settings
 
Last Test ResultOK
csg_supervisor.runtime.CSG_Disposition.statusSuccess | Failed
 

CSG Proxy - Connectivity Check

 
Performedon startup and on Network Change and every 30 sec
Perform TCP connection to CSG Proxy - calling CSG Proxy directly without considering any endpoint proxy settings
 
Last Test ResultOK
net_perf.proxy_health.statusSuccess | Failed
 
Web Site URLhttp://webdefence.global.blackspider.com:8081
net_perf.proxy_health.url 
 
Response Status Code200
net_perf.proxy_health.http_response_code 
 

Internet Access via CSG Proxy - Health & Performance

 
Performedon startup and on Network Change and every 30 sec
access Internet web-site via CSG to check access and authorization - calling CSG proxy direct without considering any endpoint proxy settings
 
Last Test ResultOK
net_perf.proxy_response.statusSuccess | Failed
 
Performance46 ms
net_perf.proxy_response.timehow long did it take
 
Web Site URLhttp://connectivitycheck.gstatic.com/generate_204
net_perf.proxy_response.url 
 
Response Status Code204
net_perf.proxy_response.http_response_code 
 

DIRECT Internet Access - Health & Performance

 
Performedon startup and on Network Change also every 30 sec
  
 
Last Test ResultOK
net_perf.direct.statusSuccess | Failed (calling direct to web-site without considering any endpoint proxy settings)
 
Web Site URLhttp://connectivitycheck.gstatic.com/generate_204
net_perf.direct.url 
 
Response Status Code204
net_perf.direct.http_response_code 
 
Performance13 ms
net_perf.direct.timehow long did it take
 

CSG policy download details

 
Policy Service Host 
csg_config_manager.config.hostngep.blackspider.com
 
CSG account WScontext7cec9b2968e82743a98fbc17f778d4bd-0
csg_supervisor.config.wscontextIdentifies thet CSG account and used to download the CSG policy settings
 
Policy download statusOK 1820 bytes
csg_config_manager.config.statussuccess | failed
 

Other parameters

intermediatecertmanager.stateOK