Endpoint Protection

 View Only

  • 1.  SEP Unmanaged firewall traffic log fills up

    Posted Aug 16, 2016 02:55 PM

    Hi,

    I have looked and looked but I cant find a way to create a firewall rule and make it so it doesnt log the traffic.

    My goal is to ingnore the trafic for a rule that states "Allow all local traffic".

    When creating the rule, I have also tried sending the data to the Packet Log but in this case, it still sends the logs to the Traffic Log.

     

    Has anyone seen this?

     



  • 2.  RE: SEP Unmanaged firewall traffic log fills up
    Best Answer

    Posted Aug 16, 2016 02:58 PM

    With unmanaged clients, there is no way to disable logging. Whether it's set to Block or Allow, both are logged regardless.

    It's a limitation which you can create a product enhancement request for.

    Submitting a Symantec product suggestion / enhancement request



  • 3.  RE: SEP Unmanaged firewall traffic log fills up

    Posted Aug 16, 2016 03:13 PM

    Ok, I can accept that. At least I'm not breaking my head anymore.

    Thank you so much for the quick response.



  • 4.  RE: SEP Unmanaged firewall traffic log fills up

    Posted Aug 16, 2016 03:14 PM

    You're welcome.



  • 5.  RE: SEP Unmanaged firewall traffic log fills up

    Posted Aug 17, 2016 04:52 AM

    Or thumb up my old enhancement request. :)

     

    https://www.symantec.com/connect/ideas/firewall-mixed-mode-all-log-entries-are-sent-database