How to Enable and Disable Logging of Denied Traffic in bSecure

A knowledge base article about How to Enable and Disable Logging of Denied Traffic in bSecure provided by the UC Berkeley IT Service Hub - Knowledge Portal

Table of Contents

When troubleshooting firewall issues—such as identifying why a connection was not permitted by a specific rule—it is often necessary to enable logging of denied traffic. Follow the steps below to configure and subsequently revert these settings in Panorama.

How to Enable Logging of Denied Traffic

  1. Log into https://panorama.net.berkeley.edu using single sign-on.
  2. From the tabs at the top of the window, choose Policies.
    Panorama top navigation bar highlighting the Policies tab.
  3. Under Security in the left pane, choose Default Rules.
    Panorama sidebar menu with Default Rules selected under the Security section.
  4. Highlight the interzone-default rule.
  5. Select Override at the bottom of the screen.
    The bottom menu in Panorama with the Override button selected.
  6. When the "Security Policy Rule - predefined" window appears, click the Actions tab.
  7. Select Log at Session End.
  8. Change Log Forwarding to default.
    The Actions tab of a security rule showing Log at Session End checked and Log Forwarding set to default.
  9. Press the OK button.
  10. Commit and Push the change to the firewalls.

At this point, any traffic that is stopped by the firewall (due to the absence of an allow rule) will be logged to the Traffic logs under the Monitor tab in Panorama.

How to Disable Logging (Revert Changes)

To undo this setting when your troubleshooting is complete:

  1. Log into https://panorama.net.berkeley.edu using single sign-on.
  2. Navigate to the Policies tab at the top.
  3. Choose Default Rules from the Security menu on the left.
  4. Highlight the interzone-default rule.
  5. Select Revert at the bottom of the screen.
    The bottom menu in Panorama with the Revert button selected.
  6. When prompted to confirm the revert, click the Yes button.
    Confirmation dialog asking if you want to revert changes to the predefined rule.
  7. Commit and Push the change to the firewalls.