topic Re: Do I need Logging Turned on on TAP security rule? in General Topics

Do I need Logging Turned on on TAP security rule?

RobinClayton — Thu, 01 Feb 2018 11:48:42 GMT

I am implementing a tap interface to listen to our internal network traffic.

I don't want all the non THREAT traffic loged, if I turn of loggin in the security rule will the threats still go to the threat log?

(I am presently listening only on a very quiet interface which has generated only one "informational" alert in 24hrs.

Thanks

Robin

pulukas — Sat, 03 Feb 2018 11:19:59 GMT

The traffic log is separate from the threat log. so you can simply not enable traffic logging on the policy and only get threat logs as a result.

RobinClayton — Wed, 14 Feb 2018 12:54:38 GMT

Yep working perfectly without the logging on.

Rob