FortiGate
FortiGate Next Generation Firewall utilizes purpose-built security processors and threat intelligence security services from FortiGuard labs to deliver top-rated protection and high performance, including encrypted traffic.
seshuganesh
Staff
Staff
Article Id 232345
Description This article describes how to troubleshoot missing implicit deny logs.
Scope FortiGate.
Solution

If implicit deny logs are missing in FortiGate and if it is necessary to view them, go under Log and report section:


1) 'Right-click' on 'Implicit' deny policy and check whether 'log violation traffic is enabled or not'.


2) Enable this option in CLI:


# config log setting
    set fwpolicy-implicit-log enable
end


3) If its memory logging, execute this command:


# config log memory filter
    set severity information
end


4) If its disk logging, execute this command:


# config log disk filter
    set severity information
end

 

5) Enable the logging in to deny the firewall policy:

 

# config firewall policy

    edit 0
        set name "Implicit Deny"
        set srcintf "any"
        set dstintf "any"
        set srcaddr "all"
        set dstaddr "all"
        set schedule "always"
        set service "ALL"
        set logtraffic all
    next

end