default policy logging (security policy view)

Function

The default policy logging command enables logging of traffic matching the default security policy.

The undo default policy logging command disables logging of traffic matching the default security policy.

Format

default policy logging

undo default policy logging

Parameters

None

Views

Security policy view

Default Level

2: Configuration level

Usage Guidelines

The default policy logging command enables the function of logging traffic that matches the default security. It takes effect only after the log type policy enable command is executed. Policy matching logs are stored in disks and can be displayed on the web UI of the FW (Monitor > Log > Policy Matching Log). If no disk is available, you can view these logs on the eSight to which the FW connects.

By default, logging of traffic matching the default security policies is disabled.

Example

# Enable logging of traffic matching the default security policy.

<sysname> system-view
[sysname] security-policy
[sysname-policy-security] default policy logging