Hi all,
I am not able to get logging on the file which has been created:
This is the conf for syslog
xxx@xxx# run show configuration system syslog archive size 100k files 3; user * { any emergency; } file messages { any critical; authorization info; } file interactive-commands { interactive-commands error; } file policy_session { any any; user info; match RT_FLOW; archive size 1000k world-readable; structured-data; }
And this is on one of the other policys, so why am i not seeing any logs from the UNTRUST zone, im 100% sure that policy 299 is being hit with some traffic?
from-zone UNTRUST to-zone TRUST { policy 200 { xxxxx then { permit; } } policy 299 { match { source-address any; destination-address any; application any; } then { deny; log { session-init; } } }