Sophos XG v18.5 Firewall logs

Question

Hi, 
 where can I find the firewall logs in the filesystem? 
 In UTM these logs are called packetfilter.log. 
 No success with /var/fwlog.log and similar logfiles in XG. They doesn't contain the wanted traffic. 
 So in which location is the firewall traffic logged and where are logfiles of the former days? 
 Thanks in advance for any comment. 
 Edi

LuCar Toni · Answer

It actually does. So Logviewer shows you all connection, which are "explicit" called. It does not show you the default drops (you do not have a firewall rule for the traffic matching). That is missing. 
 But for that, you can use "drop packet capture = drppkt" on the firewall CLI. It shows you all dropped packet in real time.

FormerMember · Answer

Hi EdiH , 
 Thank you for reaching out to Sophos Community. 
 Check out Log file details

Sophos XG v18.5 Firewall logs

Top Replies