File Blocking log is not shown in SLS for the file with the file name containing multi-byte characters
670
Created On 09/17/24 09:24 AM - Last Modified 10/28/25 21:10 PM
Symptom
- When uploading a file with a file name containing multi-byte characters, a File Blocking log is generated on the firewall but not shown in Strata Logging Service (SLS).
- The issue is observed on only a certain web storage site.
- The SLS records the file blocking logs when uploading the same file with a different name with a single-byte character.
Environment
- Next-Generation Firewalls
- Prisma Access
- Strata Logging Service
Cause
The issue occurs because the filename is SHIFT-JIS-encoded as following the upload javascript the web developer writes. We do not support SHIFT-JIS on our firewall. When uploading the file with the SHIFT-JIS-encoded filename, our firewalls still generate logs with unrecognized characters, such as "...Z.....pdf." Still, we fail to parse and ingest them on the SLS side because the firewall is always expected to send the filename value in UTF-8 format.
Resolution
This is the current design as of September 2024. Please contact our account team to submit a feature request.