- Products
- Network Security
- Threat Protection
- Secure Access Service Edge (SASE)
- Cloud Security
- Endpoint Security
- Email Security
- Secure Access
-
Wi-Fi 6 Access Points
SonicWall SonicWave 600 series access points provide always-on, always-secure connectivity for complex, multi-device environments.
Read More
- Solutions
- Industries
- Use Cases
- Solutions Widgets
- Solutions Content Widgets
Federal
Protect Federal Agencies and Networks with scalable, purpose-built cybersecurity solutions
- Solutions Image Widgets
-
- Partners
- SonicWall Partners
- Partner Resources
- Partner Widgets
- Custom HTML : Partners Content WIdgets
Partner Portal
Access to deal registration, MDF, sales and marketing tools, training and more
- Partners Image Widgets
-
- Support
- Support
- Resources
- Capture Labs
- Support Widget
- Custom HTML : Support Content WIdgets
Support Portal
Find answers to your questions by searching across our knowledge base, community, technical documentation and video tutorials
- Support Image Widgets
-
- COMPANY
- PROMOTIONS
- MANAGED SERVICES
- Contact Sales
-
- Menu
- Solutions
- Solutions Widgets
- Solutions Image Widgets
-
- Solutions Widgets
- Partners
- Partner Widgets
- Partners Image Widgets
-
- Partner Widgets
- Support
- Support Widget
- Support Image Widgets
-
- Support Widget
- Solutions
- Solutions Widgets
- Solutions Image Widgets
-
- Solutions Widgets
- Partners
- Partner Widgets
- Partners Image Widgets
-
- Partner Widgets
- Support
- Support Widget
- Support Image Widgets
-
- Support Widget
How to modify App Control Advanced log-redundancy filter settings from Command Line Interface (CLI)
03/26/2020 
14 People found this article helpful
198,050 Views
Description
This article provides explains the steps to configure log-redundancy filter from command line interface which is another way of managing the Dell SonicWall Firewall in the event if Web management is not possible.
Cause
Download the TSR from System | Diagnostics from the SonicWall in question and review the current Log redundancy settings, see TSR expert of TZ 600 showing Category IM having the same 0 value:
--App Control Advanced--
Signature Database : Downloaded
Enable App Control : Enabled
--App Control Categories--
Category: IM
Block: Disabled Log: Use Global Setting
Included Users/Groups: All Excluded Users/Groups: None
Included IP Address: All Excluded IP Address: None
Schedule: Always On
Log Redundancy Filter (seconds): 0
Resolution
Login to the CLI from SSH or Conosle:
Example below are taken from a SSH session to a TZ 600 running 6.2.5.1 Firmware.
How to login to the SonicWall UTM appliance using the Command Line Interface (CLI) (SW6180)
https://support.SonicWall.com/kb/sw6180
In the following example all the app control categories' log-redundancy filter settings will set to 60 sec
admin@TZ600> configure
config(TZ600)# app-control
(config-app-control)# category name IM
(edit-category[IM])# log-redundancy filter 60
(edit-category[IM])# exit
(config-app-control)# category name MULTIMEDIA
(edit-category[MULTIMEDIA])# log-redundancy filter 60
(edit-category[MULTIMEDIA])# exit
(config-app-control)# category name P2P
(edit-category[P2P])# log-redundancy filter 60
(edit-category[P2P])# exit
(config-app-control)# category name PROXY-ACCESS
(edit-category[PROXY-ACCESS])# log-redundancy filter 60
(edit-category[PROXY-ACCESS])# exit
(config-app-control)# category name GAMING
(edit-category[GAMING])# log-redundancy filter 60
(edit-category[GAMING])# exit
(config-app-control)# category name SRC-CTRL-APPS
(edit-category[SRC-CTRL-APPS])# log-redundancy filter 60
(edit-category[SRC-CTRL-APPS])# exit
(config-app-control)# category name SRC-CTRL-APP
(edit-category[SRC-CTRL-APPS])# exit
(config-app-control)# category name DATABASE-APPS
(edit-category[DATABASE-APPS])# log-redundancy filter 60
(edit-category[DATABASE-APPS])# exit
(config-app-control)# category name BUSINESS-APPS
(edit-category[BUSINESS-APPS])# log-redundancy filter 60
(edit-category[BUSINESS-APPS])# exit
(config-app-control)# category name MISC-APPS
(edit-category[MISC-APPS])# log-redundancy filter 60
(edit-category[MISC-APPS])# exit
(config-app-control)# category name APP-UPDATE
(edit-category[APP-UPDATE])# log-redundancy filter 60
(edit-category[APP-UPDATE])# exit
(config-app-control)# category name BACKUP-APPS
(edit-category[BACKUP-APPS])# log-redundancy filter 60
(edit-category[BACKUP-APPS])# exit
(config-app-control)# category name EMAIL-APPS
(edit-category[EMAIL-APPS])# log-redundancy filter 60
(edit-category[EMAIL-APPS])# exit
(config-app-control)# category name VoIP-APPS
(edit-category[VoIP-APPS])# log-redundancy filter 60
(edit-category[VoIP-APPS])# exit
(config-app-control)# category name REMOTE-ACCESS
(edit-category[REMOTE-ACCESS])# log-redundancy filter 60
(edit-category[REMOTE-ACCESS])# exit
(config-app-control)# category name INFRASTRUCTURE
(edit-category[INFRASTRUCTURE])# log-redundancy filter 60
(edit-category[INFRASTRUCTURE])# exit
(config-app-control)# category name REMOTE-DEBUG
(edit-category[REMOTE-DEBUG])# log-redundancy filter 60
(edit-category[REMOTE-DEBUG])# exit
(config-app-control)# category name WEBMAIL
(edit-category[WEBMAIL])# log-redundancy filter 60
(edit-category[WEBMAIL])# exit
(config-app-control)# category name DOWNLOAD-APPS
(edit-category[DOWNLOAD-APPS])# log-redundancy filter 60
(edit-category[DOWNLOAD-APPS])# exit
(config-app-control)# category name FILETYPE-DETECTION
(edit-category[FILETYPE-DETECTION])# log-redundancy filter 60
(edit-category[FILETYPE-DETECTION])# exit
(config-app-control)# category name PROTOCOLS
(edit-category[PROTOCOLS])# log-redundancy filter 60
(edit-category[PROTOCOLS])# exit
(config-app-control)# category name BROWSING-PRIVACY
(edit-category[BROWSING-PRIVACY])# log-redundancy filter 60
(edit-category[BROWSING-PRIVACY])# exit
(config-app-control)# category name SOCIAL-NETWORKING
(edit-category[SOCIAL-NETWORKING])# log-redundancy filter 60
(edit-category[SOCIAL-NETWORKING])# exit
(config-app-control)# category name SCADA-APPS
(edit-category[SCADA-APPS])# log-redundancy filter 60
(edit-category[SCADA-APPS])# exit
(config-app-control)# category name MOBILE-APPS
(edit-category[MOBILE-APPS])# log-redundancy filter 60
(edit-category[MOBILE-APPS])# exit
(config-app-control)# category name WEB-CONFERENCING
(edit-category[WEB-CONFERENCING])# log-redundancy filter 60
(edit-category[WEB-CONFERENCING])# exit
(config-app-control)# category name STOCK-TRADING
(edit-category[STOCK-TRADING])# log-redundancy filter 60
(edit-category[STOCK-TRADING])# exit
(config-app-control)# category name WEB-BROWSER
(edit-category[WEB-BROWSER])# log-redundancy filter 60
(edit-category[WEB-BROWSER])# exit
Saving the above changes
(config-app-control)# commit
% Applying changes...
% Status returned processing command:
commit
% Changes made.
(config-app-control)#
Below are the commands that can be copied and pasted into an SSH session to be applied to a device.
configure
app-control
category name IM
log-redundancy filter 60
exit
category name MULTIMEDIA
log-redundancy filter 60
exit
category name P2P
log-redundancy filter 60
exit
category name PROXY-ACCESS
log-redundancy filter 60
exit
category name GAMING
log-redundancy filter 60
exit
category name SRC-CTRL-APPS
log-redundancy filter 60
exit
category name SRC-CTRL-APP
exit
category name DATABASE-APPS
log-redundancy filter 60
exit
category name BUSINESS-APPS
log-redundancy filter 60
exit
category name MISC-APPS
log-redundancy filter 60
exit
category name APP-UPDATE
log-redundancy filter 60
exit
category name BACKUP-APPS
log-redundancy filter 60
exit
category name EMAIL-APPS
log-redundancy filter 60
exit
category name VoIP-APPS
log-redundancy filter 60
exit
category name REMOTE-ACCESS
log-redundancy filter 60
exit
category name INFRASTRUCTURE
log-redundancy filter 60
exit
category name REMOTE-DEBUG
log-redundancy filter 60
exit
category name WEBMAIL
log-redundancy filter 60
exit
category name DOWNLOAD-APPS
log-redundancy filter 60
exit
category name FILETYPE-DETECTION
log-redundancy filter 60
exit
category name PROTOCOLS
log-redundancy filter 60
exit
category name BROWSING-PRIVACY
log-redundancy filter 60
exit
category name SOCIAL-NETWORKING
log-redundancy filter 60
exit
category name SCADA-APPS
log-redundancy filter 60
exit
category name MOBILE-APPS
log-redundancy filter 60
exit
category name WEB-CONFERENCING
log-redundancy filter 60
exit
category name STOCK-TRADING
log-redundancy filter 60
exit
category name WEB-BROWSER
log-redundancy filter 60
exit
From here you will want to review to ensure no errors have shown up as entering the next command will commit the above commands to the config.
commit
Related Articles
- Bandwidth usage and tracking in SonicWall
- How to force an update of the Security Services Signatures from the Firewall GUI
- Configure Guest VLAN in the TZ firewall, for guest users to access Internet only.
Categories
- Firewalls > TZ Series
- Firewalls > SonicWall SuperMassive E10000 Series
- Firewalls > SonicWall SuperMassive 9000 Series
- Firewalls > SonicWall NSA Series
YES
NO