To see information about the traffic through a policy in your log files and reports, you must enable logging for that policy. When you enable logging in a policy, the Firebox generates log messages for the traffic through your Firebox that the policy manages. You can review the generated log messages in Traffic Monitor and in WatchGuard Cloud, Dimension, a WSM Log Server, or a syslog server your Firebox sends log messages to.
The logging options you can select depend on the policy type. For most packet filter and proxy policies, you select one option that enables the Firebox to generate log messages for monitoring and reports. For packet filter policies that allow connections there are separate settings to enable the Firebox to generate log messages for monitoring and reports.
For more information about the available options, go to Set Logging and Notification Preferences.
- Select Firewall > Firewall Policies.
The Firewall Policies page opens. - Add a policy, or double-click a policy.
The Policy Configuration page opens. - Select the Settings tab.
Example of the Logging settings for a packet filter policy that allows connections.
- In the Logging section, set the parameters to match the requirements of your security policy.
The available options depend on the type of policy you have selected. For information about the options in the Logging and Notification dialog box, go to Set Logging and Notification Preferences - Click Save.
- Add a policy, or double-click a policy.
The New Policy Properties or Edit Policy Properties dialog box opens.
- Select the Properties tab.
- Click Logging.
The Logging and Notification dialog box opens.
Example of the Logging settings for a packet filter policy that allows connections.
- Set the parameters to match your security policy.
The available options depend on the type of policy you have selected. For information about the options in the Logging and Notification dialog box, go to Set Logging and Notification Preferences. - Click OK.
Reports are available in WatchGuard Cloud and Dimension only if the Firebox sends log messages with data necessary to generate the report. For information about how to configure log messages for reports, go to Where to Enable Logging for Reports.