Skip to main content
nicky_aditera
nicky_aditera
New Member
December 11, 2019
Question

Message meets Alert condition - traffic

  • December 11, 2019
  • 1 reply
  • 3810 views

hi all

 

need help, what is this message try to tell me:

 

date=2019-12-11 time=14:35:47 devname=MJR-IGP01 devid=FG100Dxxxxxxx logid=xxxxxxxxx type=traffic subtype=forward level=notice vd=root srcip=172.xx.xx.xxx srcport=42512 srcintf="VLAN1610" dstip=192.xxx.xxx.x dstport=53 dstintf="lan" sessionid=4252030 proto=17 action=deny policyid=0 policytype=policy dstcountry="Reserved" srccountry="Reserved" trandisp=noop service="DNS" duration=0 sentbyte=0 rcvdbyte=0 sentpkt=0 appcat="unscanned" crscore=30 craction=131072 crlevel=high

 

thank you in advance

    1 reply

    lobstercreed
    lobstercreed
    New Member
    December 11, 2019

    You don't have a policy allowing this traffic as it is hitting your default (implicit) deny policy.  If you want it to be allowed you need to create an appropriate policy with a source interface of VLAN1610, destination interface of your LAN, and service of DNS.

    nicky_aditera
    nicky_aditeraAuthor
    New Member
    December 12, 2019

    Hi lobstercreed

     

    Thank you for your reply, if I don't have a policy allowing this traffic, will it causing the internet connection issue?

     

    thank you  

    lobstercreed
    lobstercreed
    New Member
    December 12, 2019

    I can't begin to give a definite answer to that as I have no idea what the layout of your network is or what DNS servers your clients are using, but of course blocking valid DNS traffic will cause any affected users to perceive that they "don't have internet" because they can't resolve hostnames like www.google.com etc, etc.

    Terms & ConditionsAccessibility statement