Actions
Feature #16092
closed
Separate IDS/IPS and link-local firewall log entries from default block logging
Feature #16092:
Separate IDS/IPS and link-local firewall log entries from default block logging
Start date:
Due date:
% Done:
100%
Estimated time:
Plus Target Version:
25.07
Release Notes:
Default
Description
On systems that use Snort/Suricata and also log the default blocking rules, the firewall logs can be very noisy due to snort2c blocks. Add an option to disable the logging for these without having to disable the logging for all other default blocking rules.
The "Block IPv4 link-local" block rule can be similarly noisy.
Files
Updated by Marcos M over 1 year ago
- Status changed from In Progress to Pull Request Review
Updated by Marcos M over 1 year ago
- Status changed from Pull Request Review to Feedback
- % Done changed from 0 to 100
Applied in changeset commit:b67a4eae7b9b815480789b08aa0c847f5689dede.
Updated by Marcos M over 1 year ago
- Subject changed from Separate snort2c firewall logs from the default blocking logs to Separate snort2c and link-local firewall logs from the default blocking logs
- Description updated (diff)
Updated by Jim Pingle over 1 year ago
- Subject changed from Separate snort2c and link-local firewall logs from the default blocking logs to Separate IDS/IPS and link-local firewall log entries from default block logging
Updated by Jordan G over 1 year ago
additional logging preferences are present in 25.03.b.20250414.1838 for specific network subsets and IDS/IPS blocked hosts disabling
Updated by Marcos M over 1 year ago
- Status changed from Feedback to Resolved
Updated by Jim Pingle about 1 year ago
- Plus Target Version changed from 25.03 to 25.07
Actions