Outbound firewall policy shows Active sessions but doesn't show any log

[DrFirewall24]

Hello All,

I have FortiGate 601E, one of my outbound policy shows Active session about 15 but it doesn't show anything on the log when I do show matching logs on the policy.

Does anyone have any idea? 

Thank you

[AEK]

Hi DrFirewall

By default the session is logged once it is closed, not before.

[DrFirewall24]

Hello AEK,

But the policy has Active sessions on it

[AEK]

Yes, this active session is not logged because it is still active. The session will be logged once it is closed (not active anymore).

[dingjerry_FTNT]

Hi @DrFirewall24 ,

Please check using the following CLI commands:

If you have VDOM:

config vdom

edit <VDOM name>

// If you have no VDOM enabled, starting from here

config firewall policy

edit <ID>

show full | grep logtraffic-start

If it is disabled, all sessions hitting this policy will not be logged until the sessions expire.