Logging of session end reason?

[Johan_Hillstrom]

Hi

Is there any way to enable logging of what caused sessions to end? (session end reason)

It would be extremely helpful when troubleshooting if we could see in the logs what caused a session to end.

Possible reasons are drop/block/deny by policy, TCP-RST (client/server), TCP-FIN, aged-out.

Can this be done in SmartLog (or even Tracker)?

It would also be helpful to be able to see if an open session is properly established vs half-open.

[PhoneBoy · Accepted solution]

See: TCP state logging