topic SmartLog displays wrong Rule Numbers in Firewall and Security Management

SmartLog displays wrong Rule Numbers

Daniel_Hainich — Tue, 28 Jan 2020 14:12:05 GMT

Hi,

iam running on R80.20 with Take 188 and Smartconsole 992000088.

In SmartLog i see logs with same src/dst/svc - but smartlog shows different rule-numbers.

The Rule 552.47 is inside sublayer.

when i open details for connection with wrong rule-number, and click on rule-link, dashboard jumps to correct rule 552.47

is it only an display-bug in smartlog?

Re: SmartLog displays wrong Rule Numbers

Dror_Aharony — Wed, 29 Jan 2020 17:02:08 GMT

yea, it looks like only a display issue.

but I'd like to make sure, when you press the link on the left card of 8.552 you're actually moved to 'right' rule of 552.47 (as on the right card)?

the actions are completely different on both cards on the left & right, so something doesn't make sense to me.

what are the 'wrong' rules: 8.552 & 2.47, are they completely irrelevant?

thought they show accept, but on card they show drop & send actions.

can you send pics of all relevant rules & full log-cards?

Re: SmartLog displays wrong Rule Numbers

Daniel_Hainich — Thu, 30 Jan 2020 08:45:48 GMT

please provide mail-address

Re: SmartLog displays wrong Rule Numbers

Nipaporn_Subwil — Sat, 01 Aug 2020 08:13:16 GMT

I also found an issue like this. My gateway and management are running with R80.40 with HF_T67.

Do we have any solution for fix this issue ?

SmartLog displays wrong Rule Numbers

Mikael — Tue, 17 Nov 2020 14:06:41 GMT

This seems to be an issue with R81 as well.

I have an issue where traffic is accepted (as expected) but the log and "Matched Rules" are completely broken...

The links seems to work though...

Re: SmartLog displays wrong Rule Numbers

G_W_Albrecht — Tue, 17 Nov 2020 14:34:56 GMT

You can send a private post to Dror_Aharony in Messages !

Re: SmartLog displays wrong Rule Numbers

G_W_Albrecht — Tue, 17 Nov 2020 14:38:16 GMT

Hmmmm - R80.40 JT is currently 87 or GA 83 together with SmartConsole package Build 414

Re: SmartLog displays wrong Rule Numbers

Dmitriy_Tiper — Wed, 21 Apr 2021 19:55:25 GMT

We recently upgraded R80.10 to R81 and have run into exactly the same issue - wrong rule number in SmartView Log; however, clicking on it opens policy on the right policy rule.

Googling returns this topic only on the issue.

Re: SmartLog displays wrong Rule Numbers

Arskaz — Tue, 19 Oct 2021 11:39:23 GMT

Using R80.30, with quite new JHF. This bug still exists. When opening the log entry, the Session tab shows the right log number.

Re: SmartLog displays wrong Rule Numbers

Dmitriy_Tiper — Tue, 19 Oct 2021 14:15:48 GMT

Things are back to normal after R81 JHF 36 installed on SMSs. Now logs show Access policy rules # matched (before it was Application and URL filtering layer rules #)