Information for use by the filtering modules of Secure Web Gateway (also known as filter engines) is updated in regular intervals on an appliance.
For example, updates are performed for DAT files containing virus signatures, for the URL filter database, or for Subscribed Lists, providing filtering information such as IP addresses or URLs.
When an update is performed, relevant data is collected and sent to the Skyhigh Security update servers, which take the role of feedback servers on these occasions.
The data is sent each time Secure Web Gateway contacts an update server to retrieve new updates.
Data collected for updates
The following types of data are collected for updates.
- Product name, for example, SWG
- Version number, for example, 7.5.0
- Build number, for example, 18062
- License information, including the customer ID
- Operating system, for example, MLOS (McAfee Linux Operating System)
- Operating system subtype, for example, mlos-1.0-x64
- ID of the appliance Secure Web Gateway is running on
This is a uniquely and universally identifying string, known as UUID.
- Appliance model, for example, WBG-5500-B
- System management BIOS (DMI) appliance vendor, for example, Skyhigh Security
- System management BIOS (DMI) appliance model, for example, Appliance A3
- System management BIOS (DMI) serial number, for example, J040209263
- CPU type, for example, 4*Intel Core i3 CPU 540 @ 3.07GHz
- Memory size, for example, 3810724 KB
- Network interface cards, for example, 4*igb, 1*e1000e
- Telemetry and debug information, for example, the health status of an appliance
- Flag that indicates whether Helix proxy functions were enabled
- For each updatable filter engine:
- Version number
- Plugin version number
- Faulty version number (if a version is faulty)
- Troubleshooting information, for example, the reason that caused a version to become faulty
Disable data collection for updates
You can disable the collection of data about updates by disabling engine updates for an appliance on the user interface of Secure Web Gateway.
- Select Configuration > Appliances, then select the appliance you want to disable engine updates for.
- Click Central Management.
- Scroll down to Automatic Engine Updates and deselect the following three checkboxes:
- Enable automatic updates
- Allow to download updates from internet
- Allow to download updates from other nodes
- Click Save Changes.