How can I log packets dropped due to a specific Deny Access Rule?

Matt

TZ600

I have created Access Rules to DENY incoming and out going traffic from specific External, Public IP addresses. I would like to log each time a connection is blocked or dropped due to these rules no matter what port is used.

Is there a way to Log Access Rule actions?

TKWITS

https://www.sonicwall.com/support/knowledge-base/using-firewall-access-rules-to-block-incoming-and-outgoing-traffic/170503532387172/

There is a logging checkbox on the General tab of the older (5.x and 6.x) interfaces, and on the Logging tab on the newer (7.x) interfaces.

Setup a syslog server and set your firewall to send logs to it.

Saravanan

Hi @MATT,

Thank you for visiting SonicWall Community.

Please ensure to have the Log Sub Category "Network Access" enabled under Log Category "Network". This should trigger the logs on the SonicWall for the rule blocking.

Hope this helps.