[nn] Logging 'deny all' and forcing policy to bottom

[Joe Loiacono <jloiacon@csc.com>]

The only way to log traffic that gets
caught by the 'deny all' implicit rule, is to make it an explicit rule
with the 'log' option. However, once you do this, you must reorder your
policies every time you add a new one to force the explicit 'deny all'
to the bottom of the list.

The KB says it can't be done, but I
thought I had seen someone show how to force this to the bottom in an earlier
list email, but I can't find it now.  :-(

Anyone know how to do this?

Thanks,

Joe

Joe Loiacono/CIV/CSC@CSC
Sent by: nn-bounces@qorbit.net

12/11/2006 04:51 PM

To	"Netscreen Mailing List" <nn@qorbit.net>
cc
Subject	[nn] NS25 crashes on license upgrade

Had a NetScreen 25 crash during an upgrade of license keys from Basic to
Advanced. Has this happened to anyone before? KB has nothing.

Thanks, 

Joe_______________________________________________
nn mailing list
nn@qorbit.net
http://qorbit.net/mailman/listinfo/nn

_______________________________________________
nn mailing list
nn@qorbit.net
http://qorbit.net/mailman/listinfo/nn