Troubleshooting Tip: How to enable 'Log IPv4 Violation Traffic' under an Implicit deny policy when Security Fabric is configured
| Description | This article describes how to enable 'Log IPv4 Violation Traffic' under an Implicit deny policy when Security Fabric is configured. This applies to both root and downstream FortiGates. |
| Scope | FortiGate. |
| Solution | When trying to enable log option for an Implicit deny policy under Policy & Objects -> Firewall Policy, the option is grayed out and cannot be enabled. The button will be grayed out when the Security Fabric is configured. To enable the 'Log IPv4 Violation Traffic' option on both the root and downstream FortiGates, use the following CLI commands: config log setting set fwpolicy-implicit-log enable end Afterwards, the option 'Log IPv4 Violation Traffic' will show as enabled.  |
