topic Re: Deny logs on the monitor traffic is not showing. please i need help in VM-Series in the Private Cloud

Deny logs on the monitor traffic is not showing. please i need help

THIQAH-CloudNetworks — Wed, 15 Jun 2022 06:42:06 GMT

as you know that clicking on the monitor, it will appear all the allow and deny logs, but on my case i dont see any drop or deny on the logs.

please any help or idea.

thanks

Re: Deny logs on the monitor traffic is not showing. please i need help

PavelK — Wed, 15 Jun 2022 09:48:26 GMT

Thank you for the post @THIQAH-CloudNetworks

unless you have a policy that will block your traffic, all traffic will hit default inter-zone policy that by default does not have logging enabled. If this is the case, then here is corresponding KB to enable logging: https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA10g000000ClHkCAK

If this is not case, could you elaborate what rules and action you configured?

Kind Regards

Pavel

Re: Deny logs on the monitor traffic is not showing. please i need help

THIQAH-CloudNetworks — Wed, 15 Jun 2022 12:50:08 GMT

thank you for your quick response,

not the case already having many allow rule and as any firewall at the end deny everything else. so i have policy that will block the traffic but still deny logs not appearing on the monitor when i troubleshot. only seeing the allow logs.

thanks

Re: Deny logs on the monitor traffic is not showing. please i need help

PavelK — Wed, 15 Jun 2022 13:07:31 GMT

Thank you for reply @THIQAH-CloudNetworks

If you have enabled log at session end, you will only see deny logs once session is closed. Could you confirm whether you see the traffic in session browser?

Kind Regards

Pavel

Re: Deny logs on the monitor traffic is not showing. please i need help

THIQAH-CloudNetworks — Wed, 15 Jun 2022 13:32:23 GMT

i dont this feature( enable log at session end), but confirm yes i can see the traffic in session browser

Re: Deny logs on the monitor traffic is not showing. please i need help

PavelK — Wed, 15 Jun 2022 23:58:51 GMT

Thank you for reply @THIQAH-CloudNetworks

this configuration is described in this KB: https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA10g000000Clt5CAC

Kind Regards

Pavel