Quantcast
Channel: All SRX Services Gateway posts
Viewing all articles
Browse latest Browse all 17645

Logging blocked traffic

$
0
0

Hello,

 

I know this comes up a lot... But I'm trying to figure out why I'm not able to see blocked traffic going from untrust to trust. I created a group that applies the following security policy to all my zones. I can see all of the blocked traffic between all my different zones EXCEPT traffic coming from untrust, to trust. I'm using an SRX300 - does anyone have any suggestions?

 

root@srx300# show groups
default-deny-template {
    security {
        policies {
            from-zone <*> to-zone <*> {
                policy defult-deny {
                    match {
                        source-address any;
                        destination-address any;
                        application any;
                    }
                    then {
                        deny;
                        log {
                            session-init;
                        }
                    }


Viewing all articles
Browse latest Browse all 17645

Trending Articles



<script src="https://jsc.adskeeper.com/r/s/rssing.com.1596347.js" async> </script>