|
If implicit deny logs are missing in FortiGate and if it is necessary to view them, go under Log and report section:
1) 'Right-click' on 'Implicit' deny policy and check whether 'log violation traffic is enabled or not'.
2) Enable this option in CLI:
# config log setting
set fwpolicy-implicit-log enable
end
3) If its memory logging, execute this command:
# config log memory filter
set severity information
end
4) If its disk logging, execute this command:
# config log disk filter
set severity information
end
5) Enable the logging in to deny the firewall policy:
# config firewall policy
edit 0
set name "Implicit Deny"
set srcintf "any"
set dstintf "any"
set srcaddr "all"
set dstaddr "all"
set schedule "always"
set service "ALL"
set logtraffic all
next
end
|
