We have those too, and I don't think you can enable logging for the
default deny. We get the functionality by making a global deny policy
and logging it. Here is the command:
set policy global any any any deny log
Kyle
TCIS List Acct wrote:
We've got a pair of Juniper SSG-550's in HA mode running Screen OS
6.1.0r4.0. For the life of me I can't figure out how to enable logging
for denied/blocked traffic for the implicit default-deny rule. I've
followed the instructions found in the Screen OS Cookbook with no
results.
Anyone have any pointers?
Thanks.
--Mike
_______________________________________________
juniper-nsp mailing list [email protected]
https://puck.nether.net/mailman/listinfo/juniper-nsp
_______________________________________________
juniper-nsp mailing list [email protected]
https://puck.nether.net/mailman/listinfo/juniper-nsp