How to enable the logs to track Access Policies matched by users?

08/25/2021 7 People found this article helpful 198,474 Views

Download

Print

Share

• LinkedIn
• Twitter
• Facebook
• Email
• Copy URL The link has been copied to clipboard

Description

How to enable the logs to track Access Policies matched by users

Resolution

By default the logs for Access Policy matching are disabled on the SMA.

You can enable these logs from Services |Settings |Under Policy Match Log Settings

Toggle Enable Policy Match Logging and check the boxes for Log 'Allow' Matches and Log 'Deny' Matches, depending on if you want to log only the allow policies, only the deny policies or both of them. You can also specify the maximum time you want to keep the logs (in days). 

In order to check the logs for the matched policies, go to Services |Policies . Hover the mouse over the Statistics for the specific policy to see the matchedCount numbers.

You will be able to see the logs for the traffic matching that policy with information about the User, Domain, Source and Destination IP addresses, Platform, Port and Time of the connection.

NOTE: This must be enabled with care as it can generate a huge amount of logs depending on the type and number of access policies that are configured.

Related Articles

• SMA1000: Where can I find the EPC interrogator & SEM Logs for Version 12.4.2?
• Printer Redirection with RDP through Secure Mobile Access
• EPC check based on Windows version

Categories

• Secure Mobile Access > SMA 100 Series