FortiDLP
FortiDLP is a cloud-native endpoint DLP and Insider Risk Solution which is aimed at monitoring and Preventing Data Theft on the endpoint, across Windows, macOS and Linux.
Anthony_E
Community Manager
Community Manager
Article Id 355619
Description This article describes how to gather a HAR file from Chrome.
Scope FortiDLP.
Solution

From time to time, a user may experience an issue or bug when using the FortiDLP UI. To help troubleshoot these issues, the support professional may ask to collect a HAR file. The procedure below describes this process.

 

Note: HAR files contain sensitive data such as credentials and cookies. When handling HAR files. Be sure to only share these via secure communication means with support professionals who know and trust.

 

Requirements: 

  • Chrome browser.
  • Access to FortiDLP.
  • Ability to recreate the problem.

 

Procedure:

  1. Open the Google Chrome web browser.
  2. Open the Developer Tools by selecting the icon in the top right that looks like 3 stacked dots, hovering over More Tools, and selecting Developer Tools.

 

Anthony_E_0-1730812990940.png

 

  1.  This can also often be accessed by pressing the F12 key while the browser is open.

 

Anthony_E_1-1730812990942.png

 

  1.  The Developer Tools will open in a pane within the browser. Navigate to the Network tab, and ensure that the red recording icon is enabled, this indicates that the data being passed is being recorded.

 

Anthony_E_2-1730812990946.png

 

  1. Log in to FortiDLP, and follow the procedure to replicate the issue:
  • Note that each time interact with the interface, one or more entries appear in the Developer Tools.
  • Once the issue has been successfully replicated, click the download icon in the Developer Tools panel to Export HAR.

 

ss2.png

 

As a best practice regarding cybersecurity hygiene, once this HAR file has been saved, be sure to log out of FortiDLP (invalidating the cookies used for authentication).

 

It is also possible to open the HAR file using Notepad and search for any credentials that were passed during the collection of the HAR.

 

It is advised to delete/obfuscate these credentials from this file before sending. Again, be sure to use only secure means of sharing this file, and only with a trusted support professional.