Manually trigger a logevent for a threat or a rule?

mikand — Tue, 19 Feb 2013 07:27:55 GMT

There is a test-command one can use in the CLI to identify which security policy a specific packet will hit.

But is there also a command to issue a log-event?

For example when you are about to manually configure triggers in your logserver to react on - otherwise im forced to send real traffic through the box and it will take some more time to accomplish compared to if there already exists a "test-log" (or similar) command in the CLI.

Re: Manually trigger a logevent for a threat or a rule?

mbutt — Tue, 19 Feb 2013 21:10:24 GMT

Hi,

As per my knowledge currently following are set of test commands that can be used

admin@LAB-123-PA-500> test

> arp ARP related

> botnet Test botnet domain categorization

> cp-policy-match Test cp policy match

> custom-url Test custom URL categorization

> data-filtering Test ccn/ssn match

> decryption-policy-match Test ssl policy match

> dns-proxy Test DNS query

> dos-policy-match Test DoS Policy match

> global-protect-satellite Test GlobalProtect satellite

> nat-policy-match Test nat policy match

> nd IPv6 Neighbor Discovery

> pbf-policy-match Test Policy Based forwarding match

> pppoe test pppoe connection

> qos-policy-match Test qos policy match

> routing verify routing settings

> scp-server-connection Test scp server connection

> security-policy-match Test security policy match

> stats-service Test statistics service

> url Test URL categorization

> url-info-cloud Return detailed information about the URL in the cloud

> url-info-host Return detailed information about the URL in the MP

> vpn verify (IKE/IPSec) VPN settings

> wildfire Test wildfire

If you think that it is valuable to your environment. You can request your local SE to file a feature request on your behalf.

Hopefully this helps.

Thank you

Numan

Re: Manually trigger a logevent for a threat or a rule?

mikand — Thu, 21 Feb 2013 06:01:10 GMT

Thanks, I have filed this as a RFE (Request for Enhancement).

topic Re: Manually trigger a logevent for a threat or a rule? in General Topics

Manually trigger a logevent for a threat or a rule?

Re: Manually trigger a logevent for a threat or a rule?

Re: Manually trigger a logevent for a threat or a rule?