SDM and ZoneBasedFirewall on 3825: How to View Firewall logs?

[kdepijper]

Hello,

If I read the documentation, I have to go to ACL Editor/Access Rules, and click "Log matches against this entry"

However, my statefull rules are configured under ACL Editor/Firewall Rules, and there I do not have the option "Log matches against this entry".

Any idea?

thx Karien

[Alex Yeung]

Hi Karien,

Which document are you referring to?

Alex Yeung

[kdepijper]

To the help in the SDM

[Alex Yeung]

can you provide a link? or is in the Help menu in SDM?

Alex Yeung

[kdepijper]

Yes, the help menu in SDM

[kdepijper]

Hello,

I opened a case@cisco, and firewall accepts are not logged. A workaround you can use is to use audit-trail with parameter map.

In future, it will be possible to activate audit-trail generally, while now it still has to be enabled per class-map

Case closed

[zenon_electronics]

Hi, on the ZoneBased Firewall you can see logs. All you have to do, is to manually apply class class-default on every policy map you have defined.

Example:

!

policy-map type inspect in-out-policy

class class-default

drop log

!

When you do this to all policy maps, you will see all packets that are droped.

Regards.