Interface ping logs are not showing in traffic log

[gpsriram]

Hi All,

firewall interface configured with management profile where ICMP is enabled and i can ping the firewall ip. But we can't see any logs for ICMP in firewall .

How we can get this ?

[kiwi]

Hi @gpsriram,

As far as I know ICMP is not an option in the interface management profile. 

Ping is the selectable option as shown in the screenshot :

Look for 'ping' application in your traffic log instead of icmp application ... + also make sure that the security rule which is being hit is actually being logged :

I hope this helps.

Cheers !

-Kiwi.

[Mick_Ball]

yes it displays as ping but only if you have a security policy that it matches with log enabled.

you can only see it in @kiwi screen shot as it's hitting the rule "vdraad". 

if you are just relying on the management profile then it seems not to show in traffic log. 

[aleksandar.astardzhiev · Accepted solution]

Most probably because you don't have specific rule allowing this traffic, but rather relying on the default intra-zone rule, which doesn't log any traffic.

Even that you have interface management profile you still need a rule the policy to allow that traffic. It is common mistake to overlook this as in most of the cases the default intra-zone rule is already allowing this traffic. But default settings for the intra-zone rule is to NOT log the traffic.

There is two ways to solve this:

- Create specific rule (same source and destination zone) for this traffic and enable the log option on this rule

- Override the default intra-zone rule and enable the logging.

Note that the second option will log any other intra-zone traffic so, depending on your enviroment it migth generate lots of lots of unecessary logs

[Mick_Ball]

Good point Mr Astardzhiev.