Thread Info
  • State Not Answered
  • +2 person also asked this people also asked this
  • Locked Locked
  • Replies 22 replies
  • Subscribers 33 subscribers
  • Views 62115 views
  • Users 0 members are here
Options
Suggested
This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Blocked traffic not logged - Bug

lferrara

Today,


one of my external connection was not working, so I decided to have a look at Security Logs to see which port this application uses.

Blocked traffic is not logged. I filtered by destination IP (because I know the IP), but nothing appears. No filter, same result.

So to know which port was used, I created a Policy rule allowing ALL and then I was able to find the destination port.

This is a bug. Can someone do this test?

Luk



This thread was automatically locked due to age.
  • 0 in reply to FloSupport

    Hello Flo,

    Yes.  And nobody wants that.  So, Sophos, fix it, and match this industry standard.  You might as well look and match the best (at least, at reporting): Checkpoint

    While we are at it, what other things rule "mother-in-law" 0 does ?

    Paul Jr

  • 0 in reply to FloSupport

    Hey Flo,

    yes you're right, the ACL for DNS is activated. What confuses me about the log entry is the allowed traffic using a deny rule.

    So the ACL rules are always above a standard Firewall rule? Possibly this can be indicated differently in the logviewer, when the ACL Rule is set.

     

    Thank you and good night.