I know that this "problem" was discussed sevaral time, but from my point of view ISN´T solved AND old discussion is closed due age.
Sophos in default settings LOG all droped boradcast as "apploiance acccess".
If I stop logging for "Local ACL" - ok, logs are clean from boradcast, but - unfortunately - also from another "Local ACL" logs.
I think that : broadcast dropping is OK, but loggins should be selectively aloowed/denied AND logging this as "Appliance access" is COMPLETELY wrong.
It is possible to somehow STOP this anyoning logging?
( I know that we CAN delete this in syslog or SIEM system, but I am sure, that simply drop the broadcast ISN´T worth to logging.)
This thread was automatically locked due to age.