Appliance Access and Broadcast

Question

Broadcast packet are normal into LAN zones. 
 It's possible to quit messages logs (Appliance Access - Denied) originate from LAN Zones (like TCP port 137 that reach firewall) and keep active message logs (Appliance Access - Denied) originate from WAN Zone?

FormerMember · Answer

Hi, Thanks for reaching out to Sophos Community.

With my XG, I have the same observation with broadcast packets, especially tcp port 137. As far as I know, Currently, there's no option available to stop showing these broadcast message logs in log viewer.

You can always use the filter (not equal to) with src/dst IP or port while troubleshooting to stop seeing those log entires.

Appliance Access and Broadcast

Top Replies