topic Interface ping logs are not showing in traffic log in General Topics

Interface ping logs are not showing in traffic log

gpsriram — Mon, 07 Jan 2019 08:27:57 GMT

Hi All,

firewall interface configured with management profile where ICMP is enabled and i can ping the firewall ip. But we can't see any logs for ICMP in firewall .

How we can get this ?

Re: Interface ping logs are not showing in traffic log

kiwi — Mon, 07 Jan 2019 09:57:01 GMT

Hi @gpsriram,

As far as I know ICMP is not an option in the interface management profile.

Ping is the selectable option as shown in the screenshot :

Look for 'ping' application in your traffic log instead of icmp application ... + also make sure that the security rule which is being hit is actually being logged :

I hope this helps.

Cheers !

-Kiwi.

Re: Interface ping logs are not showing in traffic log

Mick_Ball — Mon, 07 Jan 2019 12:46:15 GMT

yes it displays as ping but only if you have a security policy that it matches with log enabled.

you can only see it in @kiwi screen shot as it's hitting the rule "vdraad".

if you are just relying on the management profile then it seems not to show in traffic log.

Re: Interface ping logs are not showing in traffic log

aleksandar.astardzhiev — Wed, 09 Jan 2019 12:54:34 GMT

Most probably because you don't have specific rule allowing this traffic, but rather relying on the default intra-zone rule, which doesn't log any traffic.

Even that you have interface management profile you still need a rule the policy to allow that traffic. It is common mistake to overlook this as in most of the cases the default intra-zone rule is already allowing this traffic. But default settings for the intra-zone rule is to NOT log the traffic.

There is two ways to solve this:

- Create specific rule (same source and destination zone) for this traffic and enable the log option on this rule

- Override the default intra-zone rule and enable the logging.

Note that the second option will log any other intra-zone traffic so, depending on your enviroment it migth generate lots of lots of unecessary logs

Re: Interface ping logs are not showing in traffic log

Mick_Ball — Wed, 09 Jan 2019 12:58:20 GMT

Good point Mr Astardzhiev.