topic Disable logging of a specific implied rule (Tunnel_test) in General Topics

Disable logging of a specific implied rule (Tunnel_test)

CP-NDA — Tue, 24 Aug 2021 08:23:14 GMT

Hi,

Is there a way to disable the log a specific implied rule (tunnel_test) ?

We are getting thousand of logs and these are really useless.

We tried to turned off the log in the VPN community but it has no impact on the logs

Thank you

Nicolas

Re: Disable logging of a specific implied rule (Tunnel_test)

G_W_Albrecht — Tue, 24 Aug 2021 09:58:47 GMT

This could be a direct answer: sk110218: How to enable logging of informative implied rules on Security Gateway R80.10 and higher

Other possibility is to change the Permanent tunnel mode (see sk104760: ATRG: VPN Core).

Re: Disable logging of a specific implied rule (Tunnel_test)

CP-NDA — Tue, 24 Aug 2021 10:43:22 GMT

Hi,

Thank you for the answer however this SK is not describing how disable log for specific rule.

If I'm not wrong this will only provide more info about the involved implied rule in the logs.

We just want to disable the logging of a specific traffic without changing the time of permanent tunnel which is just fine

Thank you

Re: Disable logging of a specific implied rule (Tunnel_test)

_Val_ — Tue, 24 Aug 2021 11:09:13 GMT

Logging is for all implied rules.

Technically, you can edit implied_rules.def file on your management server, take tunnel test out AND add it a an explicit rule on top of your policy, but iI cannot really recommend this, as it is way harder to manage than filtering out logs you do not want to see in SmartView.

If you, however, want to go this road, look into sk92281 and sk104879.

Once again, not recommended.

Re: Disable logging of a specific implied rule (Tunnel_test)

CP-NDA — Tue, 24 Aug 2021 11:46:48 GMT

Good to know

Seems to be a limitation as well

We've to chose to disable all logs or follow an not recommended method 🙂

Thank you for your help

Re: Disable logging of a specific implied rule (Tunnel_test)

G_W_Albrecht — Tue, 24 Aug 2021 13:25:37 GMT

No, this SK shows how to disable all logs for implied rules in part (3) How to disable the logging of informative implied rules on the Security Gateway. It lists the 3 implied rules for tunnel tests.

But would be a good question for TAC !