Quantum Spark 1575 log denied packets

[Robert_Vil]

Quantum Spark 1575 running R81.10.17 (996004721)

There is a block rule at the buttom configured to log.

My issue is there is no block/deny logs in security logs. Is this a bug?

Regards

Robert

[Lesley · Accepted solution]

And if you replace the internet object with ''any'' ?

[Chris_Atkinson]

What do you have configured under... Access Policy > Firewall > Blade Control > Access Policy Control > Tracking

https://sc1.checkpoint.com/documents/SMB_R81.10.X/AdminGuides_Locally_Managed/EN/Content/Topics/Conf...

[Robert_Vil]

I think this only works when URL filtering is enabled.

[Chris_Atkinson]

From the note in the admin guide it says tracking options apply to both in the context of automatic rules so that's probably the catch.

For sure Internet object is a feature of URLF/AppC however so this is a matching issue not logging if those blades aren't active.

[the_rock]

What @Lesley said actually makes lcal sense and here is why. Object Internet would only work if you have urlf blade enabled, if not, rule will never get hit.