Visitor III

Solved

How to enable a "Log violation traffic" in DENY policy

Forum|Forum|2 years ago
May 7, 2024
14 replies
7989 views

Hi,

I created a DENY policy (see. picture below). I tried to enable log violation traffic, but after click OK, and than reedit the policy it is switched off again. This is a normal behaviour?

Best answer by ebilcari

This issue is already reported and affects the 7.4 firmware branch. It is already fixed and will be included in future releases (#985419). It is classified only as a GUI issue, if logging is enabled through CLI it will log the traffic.

AEK

SuperUser

Hi

This is not normal. Probably a bug.

Which FortiOS version?

Also you may try edit your firewall policy from CLI and enter the following.

set logtraffic all

AEK

fortinetforumfiokomAuthor

Visitor III

I have fortigate 201F and a 81F with v7.4.3 build2573 firmware. The same thing happens on both. I tried it from another browser, but the result is the same.

I had already set in the policy :

set logtraffic all

AEK

SuperUser

What you see when you edit the policy and type "show full | grep logtraffic"?

AEK

AnthonyH

Staff

Hello fortinetforumfiokom,

This may be a cosmetic issue in the GUI. When you edit the policy in the CLI are you see the logging enabled here? Or do you see any traffic being denied in the logs?

fortinetforumfiokomAuthor

Visitor III

1. if I create a new rule and don't set the logging, it won't log

2. turn on Log violation traffic on the gui in the policy, it starts logging, but next time if l edit the policy the Log violation traffic switch indicates that it is off.

3. From now on I can only turn off logging from cli :set logtraffic disable

ebilcariAnswer

Staff

This issue is already reported and affects the 7.4 firmware branch. It is already fixed and will be included in future releases (#985419). It is classified only as a GUI issue, if logging is enabled through CLI it will log the traffic.

Emirjon

Sign up

Login with SSO

Login to the community

Login with SSO