This discussion has been locked.

You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Country Blocking Rule don't appear in Firewall Log

Hi,

we have a XG Firewall on a customers site. We configured a Drop-Rule for specified countries. We tested the rule with a connection from these countries via proxys. Everthing is working. The customer checked the firewall log an told me that he does not see any dropped packet. He don't see any entry for this rule ID.

The rule is configured to log traffic. Is it normal that this traffic is not logged in firewall log?

Thanks in advance

Andreas

This thread was automatically locked due to age.

Parents

0 LuCar Toni over 6 years ago

XG does not log traffic without rule - That is working as expected (So Default drop is not logging).

But if you have a rule, which drops the traffic, it should appear in the Log Viewer.

Please verify, the rule is actually hitting.

You can check this on the CLI via 'drppkt'

Or https://community.sophos.com/kb/en-us/127111
Cancel
Vote Up 0 Vote Down

Cancel
0 Andreas Kossmann over 6 years ago in reply to LuCar Toni

Ich have a rule. It is a rule with drop traffic from specified countries.

On CLI i can see the drop of the connection. In the Log Viewer in the browser not.
Cancel
Vote Up 0 Vote Down

Cancel

Reply

0 Andreas Kossmann over 6 years ago in reply to LuCar Toni

Ich have a rule. It is a rule with drop traffic from specified countries.

On CLI i can see the drop of the connection. In the Log Viewer in the browser not.
Cancel
Vote Up 0 Vote Down

Cancel

Children

No Data