Create a Global Zone to Global Zone Any Any Any Deny Log rule. Global
rules are processed after individual zone-to-zone rules and would
therefore only trigger if all other possible polices failed to match.
/dh
Joe Loiacono wrote:
The only way to log traffic that
gets
caught by the 'deny all' implicit rule, is to make it an explicit rule
with the 'log' option. However, once you do this, you must reorder your
policies every time you add a new one to force the explicit 'deny all'
to the bottom of the list.
The KB says it can't be done, but I
thought I had seen someone show how to force this to the bottom in an
earlier
list email, but I can't find it now. :-(
Anyone know how to do this?
Thanks,
Joe
Had a NetScreen 25 crash during an upgrade of license keys from Basic
to
Advanced. Has this happened to anyone before? KB has nothing.
Thanks,
Joe_______________________________________________
nn mailing list
nn@qorbit.net
http://qorbit.net/mailman/listinfo/nn
_______________________________________________
nn mailing list
nn@qorbit.net
http://qorbit.net/mailman/listinfo/nn
|
_______________________________________________
nn mailing list
nn@qorbit.net
http://qorbit.net/mailman/listinfo/nn
|