Nortel SMC 2450, Implementation Manual

Page: 111 / 262

Firewall deployment Page 111 of 260
Secure Multimedia Controller Implementation Guide
Unavailable policy logging
When a packet hits the firewall and there is not a rule to match it, it is silently
dropped without logging a message. These dropped packets may be from
services that are failing when the SMC is placed within the path of the traffic;
therefore, logging these messages (called unavailable policies) is critical to
determining which additional rules are required for a particular installation.
Procedure 28
Enabling unavailable policy logging
1 Log on to the Web UI.
2 Navigate to Multimedia Security > Security Settings > Log >
Messages .
3 Enable Unavailable Policies .
4 Click Apply .
End of Procedure
Result : The firewall logs now list additional packets that were dropped.
These packets can be correlated to the IP addresses of the client to determine
which ones are being dropped.
An example of an unavailable policy entry:
Mar 1 13:01:37 127.0.0.1 id=firewall time="2006-03-01
13:01:37" fw=a10-10-10-10 pri=4 proto=6(tcp)
src=2.2.2.100 : 32802 dst=3.3.3.200 : 22 mid=2076 mtp=10
msg="Access Policy not found, dropping packet from ext n/
w" agent=Firewall