Deny logs on the monitor traffic is not showing. please i need help

[thiqah-infra]

as you know that clicking on the monitor, it will appear all the allow and deny logs, but on my case i dont see any drop or deny on the logs.

please any help or idea.

thanks

[PavelK]

Thank you for the post @thiqah-infra

unless you have a policy that will block your traffic, all traffic will hit default inter-zone policy that by default does not have logging enabled. If this is the case, then here is corresponding KB to enable logging: https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA10g000000ClHkCAK

If this is not case, could you elaborate what rules and action you configured?

Kind Regards

Pavel

[thiqah-infra]

thank you for your quick response,

not the case already having many allow rule and as any firewall at the end deny everything else. so i have policy that will block the traffic but still deny logs not appearing on the monitor when i troubleshot. only seeing the allow logs.

thanks  

[PavelK]

Thank you for reply @thiqah-infra

If you have enabled log at session end, you will only see deny logs once session is closed. Could you confirm whether you see the traffic in session browser?

Kind Regards

Pavel

[thiqah-infra]

i dont this feature( enable log at session end), but confirm yes i can see the traffic in session browser

[PavelK]

Thank you for reply @thiqah-infra

this configuration is described in this KB: https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA10g000000Clt5CAC

Kind Regards

Pavel