Log history very short

[schmil]

Hi,

Is the log file length for forwarding traffic on disk configurable?

On my FG3140B the Log is 90.000 entries large containing only 2 hours. That is way too short!

Config:

FSM1 (35GB of 58GB)

Feature                       |   Storage Size   |   Allocated   |   Used

Logging and Archiving   |   23GB             |                  | 

Disk Logging               |                       |  0MB           | 46MB

Historic Reports           |                       |  0MB           |  35GB

[schmil]

I'm trying to strip down my logs and am all the way up to 9 hours of logs :\

I have a policy "dns allow all" with logging OFF, but my forward-log is full of connections matching this policy. Why is that?

[SCSIraidGURU]

My suggestion would be an outbound rule to your ISP DNS servers and a second inbound rule from those DNS server back to your DNS.   This way you can disable logging inbound.   Logs will drop off in 7 days so it is really a problem?  The only problem with DNS allow all is it is not a good practice.   You should have your DNS only forward to your ISP DNS and return from them.