Create a Post
cancel
Showing results for 
Search instead for 
Did you mean: 
SamiH
Contributor

Application usage logging

Application name field seems to be empty in almost every row, yet I have application blade turned on and a rule in application policy to log all usage. When does firewall recognize the application and record it to logs and when not?

I still got some usage logging for applications in logs somewhere, since I can check the reports for amount of transferred data by some applications and also e.g. risky application report gets populated.

0 Kudos
1 Reply
PhoneBoy
Admin
Admin

It depends on the rule.
You can generally force it by setting the rule to log either Detailed or Extended.
If you rules merely “log” they may not populate the application as the rule may be enforced without triggering deeper inspection (eg because it’s a service the firewall can detect/enforce without App Control).

0 Kudos

Leaderboard

Epsum factorial non deposit quid pro quo hic escorol.

Upcoming Events

    CheckMates Events