How to enable web intelligence debug logging (Sophos)

Applies to Sophos Home for Windows computers

The following article will guide you through enable debug logging for the web filtering service (Web intelligence) in Sophos Home Premium. These steps are specific to issue troubleshooting, and should only be used by advanced users / when instructed by Sophos Home support.

Note: Please remember to disable debug logging after having collected the needed information. Otherwise the log will continue growing non stop.

Instructions

1. Disable Tamper Protection as per: Sophos Home (Windows) How to disable Tamper protection
2. Open Regedit and navigate to the following location.
   
   
   • If you run a 32-bit operating system navigate to:
     HKEY_LOCAL_MACHINE\SOFTWARE\Sophos\Web Intelligence\
   • If you run a 64-bit operating system navigate to:
     HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Sophos\Web Intelligence\
     
     
3. Add a new DWORD named LogLevel and set the value to 3
   
4. Navigate to the following location:
   • If you are running a 32-bit operating system: HKEY_LOCAL_MACHINE\SOFTWARE\Sophos\Web Intelligence\Web Control\
   • 64-bit operating system: HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Sophos\Web Intelligence\Web Control\
     
     
5. Add a new DWORD named LogLevel and Set the value to 3
   
6. Open the Service Manager (services.msc) by clicking the Windows Button  usually in the bottom left corner of the screen.
7. Search for services.msc press Enter, scroll down and find the following services right click on them and Restart them if they exist:
   • Sophos Web Intelligence
   • Sophos Web Control
   • Sophos Web Filter
8. The logs will be located in C:\WINDOWS\Temp\ the logs needed are:
   1. swc_diag.log
   2. swc_messaging.log
   3. swc_rms_diag.log
   4. swifdiag.log
   5. swisdiag.log
   6. swi_fc.log
   7. swi_filter.log

Disable debug logging

1. Refer back to step 1 in the previous instructions right click on LogLevel and delete it.
2. Refer back to step 3 in the previous instructions right click on LogLevel and delete it.
3. Repeat steps 6 and 7 from the previous set of instructions.

Source : Official Sophos Brand
Editor by : BEST Antivirus KBS Team