topic Re: "Interzone-Default" rule different config on one firewall in General Topics

"Interzone-Default" rule different config on one firewall

stevenkadish — Wed, 19 Feb 2020 15:05:06 GMT

Hi all,

I just noticed something strange. I have seven firewalls, and one one of them, the default configuration of the "Interzone-default" rule is different. The default Log Setting action for the rule is "Log at Session End," and I had to override the rule to clear this box.

On all of my other firewalls, this box is cleared by default.

Is there anyone who can provide an explanation of this?

Thank you,

- Steve

Re: "Interzone-Default" rule different config on one firewall

kiwi — Wed, 19 Feb 2020 15:53:02 GMT

Hi @stevenkadish ,

Default should be cleared.

Maybe it was enabled before for debugging or troubleshootin ?

Cheers,

-Kiwi.

Re: "Interzone-Default" rule different config on one firewall

stevenkadish — Wed, 19 Feb 2020 21:09:30 GMT

Hello Kiwi,

I found that someone had overwritten the default rules in Panorama and pushed them out to that firewall. So the rule I was looking at on the local firewall had been overwritten with the changed rule from Panorama.

Thanks,

- Steve