Manually trigger a logevent for a threat or a rule?

[mikand]

There is a test-command one can use in the CLI to identify which security policy a specific packet will hit.

But is there also a command to issue a log-event?

For example when you are about to manually configure triggers in your logserver to react on - otherwise im forced to send real traffic through the box and it will take some more time to accomplish compared to if there already exists a "test-log" (or similar) command in the CLI.

[mbutt · Accepted solution]

Hi,

As per my knowledge currently following are set of test commands that can be used

admin@LAB-123-PA-500> test

> arp                        ARP related

> botnet                     Test botnet domain categorization

> cp-policy-match            Test cp policy match

> custom-url                 Test custom URL categorization

> data-filtering             Test ccn/ssn match

> decryption-policy-match    Test ssl policy match

> dns-proxy                  Test DNS query

> dos-policy-match           Test DoS Policy match

> global-protect-satellite   Test GlobalProtect satellite

> nat-policy-match           Test nat policy match

> nd                         IPv6 Neighbor Discovery

> pbf-policy-match           Test Policy Based forwarding match

> pppoe                      test pppoe connection

> qos-policy-match           Test qos policy match

> routing                    verify routing settings

> scp-server-connection      Test scp server connection

> security-policy-match      Test security policy match

> stats-service              Test statistics service

> url                        Test URL categorization

> url-info-cloud             Return detailed information about the URL in the cloud

> url-info-host              Return detailed information about the URL in the MP

> vpn                        verify (IKE/IPSec) VPN settings

> wildfire                   Test wildfire

If you think that it is valuable to your environment. You can request your local SE to file a feature request on your behalf.

Hopefully this helps.

Thank you

Numan

[mikand]

Thanks, I have filed this as a RFE (Request for Enhancement).