IPS and Flood Protection logs always empty in GUI

Question

Is there a setting I'm missing? Every one of our several hundred firewalls always shows empty IPS logs ("No record found"), even when the firewall shows that it has been dropping packets due to flood protection. See the screenshots below.

This thread was automatically locked due to age.

Joshua Drost · Accepted Answer

Vivek Jagad said: Hello Joshua Drost , Thank you for reaching out to the community, Can you check under the firewall rules whether the option "Log firewall traffic." is enabled ? Under the Other security features is the IPS policy applied ? Under the Intrusion Prevention > IPS Polices > "IPS protection" toggled on ? Under the System Services > Log settings > is logging for IPS enabled ?

"Configure > System Services > Log Settings > DoS Attack (local reporting)" appears to be the checkbox I was missing, as it's not turned on by default. Thank you!

Vivek Jagad · Answer

Hello Joshua Drost , Thank you for reaching out to the community, Can you check under the firewall rules whether the option "Log firewall traffic." is enabled ? Under the Other security features is the IPS policy applied ? Under the Intrusion Prevention > IPS Polices > "IPS protection" toggled on ? Under the System Services > Log settings > is logging for IPS enabled ?

IPS and Flood Protection logs always empty in GUI

Top Replies

Submitted a Tech Support Case lately from the Support Portal?