"Interzone-Default" rule different config on one firewall

[stevenkadish]

Hi all,

I just noticed something strange.  I have seven firewalls, and one one of them, the default configuration of the "Interzone-default" rule is different.  The default Log Setting action for the rule is "Log at Session End," and I had to override the rule to clear this box.

On all of my other firewalls, this box is cleared by default.  

Is there anyone who can provide an explanation of this?

Thank you,

- Steve

[kiwi]

Hi @stevenkadish ,

Default should be cleared.

Maybe it was enabled before for debugging or troubleshootin ?

Cheers,

-Kiwi.

[stevenkadish · Accepted solution]

Hello Kiwi,

I found that someone had overwritten the default rules in Panorama and pushed them out to that firewall.  So the rule I was looking at on the local firewall had been overwritten with the changed rule from Panorama.

Thanks,

- Steve