An administrator is troubleshooting an issue with traffic that matches the intrazone-default rule, which is set to default configuration. What should the administrator do?
A.
change the logging action on the rule
B.
review the System Log
C.
refresh the Traffic Log
D.
tune your Traffic Log filter to include the dates
change the logging action on the rule (override default settings)
intrazone-default has Log-Settings disabled by default
https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA10g000000ClomCAC
Correct answer is B
Here’s why:
System Log: Reviewing the System Log can provide insights into issues related to system operations, including problems with default rules and internal processing. It can help identify if there are any system-wide issues or errors affecting the traffic handling.
key word is "default", Remember that in intrazone is disabled logging action and you cannot see any traffic log related. System log is not capable to show some log about traffic
A voting comment increases the vote count for the chosen answer by one.
Upvoting a comment with a selected answer will also increase the vote count towards that answer by one.
So if you see a comment that you already agree with, you can upvote it instead of posting a new comment.
DlaEdu_Ex
Highly Voted 1 year, 6 months agode7cdfd
Most Recent 1 month, 2 weeks agoabbasr
4 months, 3 weeks agoAlessandro1986
3 months, 4 weeks ago[Removed]
1 year, 4 months agoSanjug2022
1 year, 6 months agokikeabcd
1 year, 8 months agoSessoConPupoPazzo
1 year, 8 months agonolox
1 year, 10 months ago