Skip to main content
bbache99
New Member
December 19, 2012
Question

View blocked application control logs

  • December 19, 2012
  • 6 replies
  • 12503 views
Hi all, I am using a firewall running OS5. I am struggling to find where I can view application control logs for applications that have been blocked/passed - does anyone know where these can be viewed? In UTM monitor/logs there is everything but application control logs available... Thanks!

    6 replies

    bbache99
    bbache99Author
    New Member
    December 19, 2012
    Basically in the OS5 manual it states: " The application control list that is used must have Enabled Logging selected within the list, as well as logging enabled within each application entry. Each application entry can also have packet logging enabled. Packet logging for application control records the packet when an application type is identified, similar to IPS packet logging." I cannot find where to enable logging within my application sensors. At the moment I have no record of application activity on the network and can' t figure out why.
    bbache99
    bbache99Author
    New Member
    December 19, 2012
    For anyone who stumbles across this post, the resolution is as follows: Need to enable logging in the cli under the app control: config application list edit " XXXXX" set extended-utm-log enable set log enable
    networkingkool
    New Member
    May 6, 2013
    Hi Bbache99, Could you point me where to show the application filter log? In my GUI, I have no that option like Web Filter Log or Antivirus Log I has entered your above commands
    gfloyd
    New Member
    January 17, 2013
    Thank you, I have been trying to figure this out myself. Documentation for V5 Application control has been difficult to find.
    stephen_ren_FTNT
    Staff
    Staff
    January 25, 2013
    You can view application control logs for applications in the traffic log.Need to enable app logs by " set logtraffic-app enable" in the firewall policy.
    Baptiste
    New Member
    March 25, 2014
    Hello, As there are somes advises above, I would like to know what to do in order to see Application Control log : config application list edit " XXXXX" set extended-utm-log enable set log enable OR " set logtraffic-app enable" And will there be a dedicated Application Control panel or logs are in another existing view ? Thanks
    Thought Leadership Security Summit. Outpace New Threats with AI - enhanced defense. Tuesday, Septmeber 15, 8:30 AM - 2:30 PM PT. The Golf Club at Newcastle, WA.
    Fortinet Flag the Hack. Wednesday, August 26, 9:00 AM - 5:00 PM ET, COSM, Atlanta, GA.