- Products
- Network Security
Next Generation FirewallNext-generation firewall for SMB, Enterprise, and Government
Security ServicesComprehensive security for your network security solution
Network Security ManagerModern Security Management for today’s security landscape
- Advanced Threat Protection
Capture ATPMulti-engine advanced threat detection
Capture Security applianceAdvanced Threat Protection for modern threat landscape
- Access Security
Cloud Edge Secure AccessDeploy Zero-Trust Security in minutes
Secure Mobile AccessRemote, best-in-class, secure access
Wireless Access PointsEasy to manage, fast and secure Wi-FI
SwitchesHigh-speed network switching for business connectivity
- Email Security
Email SecurityProtect against today’s advanced email threats
- Cloud Security
Cloud App SecurityVisibility and security for Cloud Apps
Cloud Firewall (NSv)Next-generation firewall capabilities in the cloud
- Endpoint Security
Capture ClientStop advanced threats and rollback the damage caused by malware
Content Filtering ClientControl access to unwanted and unsecure web content
- Product Widgets
- Product Menu Right Image
- Network Security
- Solutions
- Solutions Widgets
- Solutions Image Widgets
- Solutions Widgets
- Partners
- Partner Widgets
- Partners Image Widgets
- Partner Widgets
- Support
- Support Widget
- Support Image Widgets
- Support Widget
- Products
- Network Security
- Next Generation FirewallNext-generation firewall for SMB, Enterprise, and Government
- Security ServicesComprehensive security for your network security solution
- Network Security ManagerModern Security Management for today’s security landscape
- Advanced Threat Protection
- Capture ATPMulti-engine advanced threat detection
- Capture Security applianceAdvanced Threat Protection for modern threat landscape
- Access Security
- Cloud Edge Secure AccessDeploy Zero-Trust Security in minutes
- Secure Mobile AccessRemote, best-in-class, secure access
- Wireless Access PointsEasy to manage, fast and secure Wi-FI
- SwitchesHigh-speed network switching for business connectivity
- Email Security
- Email SecurityProtect against today’s advanced email threats
- Cloud Security
- Cloud App SecurityVisibility and security for Cloud Apps
- Cloud Firewall (NSv)Next-generation firewall capabilities in the cloud
- Endpoint Security
- Capture ClientStop advanced threats and rollback the damage caused by malware
- Content Filtering ClientControl access to unwanted and unsecure web content
- Product Widgets
- Product Menu Right Image
- Network Security
- Solutions
- Solutions Widgets
- Solutions Image Widgets
- Solutions Widgets
- Partners
- Partner Widgets
- Partners Image Widgets
- Partner Widgets
- Support
- Support Widget
- Support Image Widgets
- Support Widget
How to modify App Control Advanced log-redundancy filter settings from Command Line Interface (CLI)
03/26/2020 
14 People found this article helpful
44,411 Views
Description
This article provides explains the steps to configure log-redundancy filter from command line interface which is another way of managing the Dell SonicWall Firewall in the event if Web management is not possible.
Cause
Download the TSR from System | Diagnostics from the SonicWall in question and review the current Log redundancy settings, see TSR expert of TZ 600 showing Category IM having the same 0 value:
--App Control Advanced--
Signature Database : Downloaded
Enable App Control : Enabled
--App Control Categories--
Category: IM
Block: Disabled Log: Use Global Setting
Included Users/Groups: All Excluded Users/Groups: None
Included IP Address: All Excluded IP Address: None
Schedule: Always On
Log Redundancy Filter (seconds): 0
Resolution
Login to the CLI from SSH or Conosle:
Example below are taken from a SSH session to a TZ 600 running 6.2.5.1 Firmware.
How to login to the SonicWall UTM appliance using the Command Line Interface (CLI) (SW6180)
https://support.SonicWall.com/kb/sw6180
In the following example all the app control categories' log-redundancy filter settings will set to 60 sec
admin@TZ600> configure
config(TZ600)# app-control
(config-app-control)# category name IM
(edit-category[IM])# log-redundancy filter 60
(edit-category[IM])# exit
(config-app-control)# category name MULTIMEDIA
(edit-category[MULTIMEDIA])# log-redundancy filter 60
(edit-category[MULTIMEDIA])# exit
(config-app-control)# category name P2P
(edit-category[P2P])# log-redundancy filter 60
(edit-category[P2P])# exit
(config-app-control)# category name PROXY-ACCESS
(edit-category[PROXY-ACCESS])# log-redundancy filter 60
(edit-category[PROXY-ACCESS])# exit
(config-app-control)# category name GAMING
(edit-category[GAMING])# log-redundancy filter 60
(edit-category[GAMING])# exit
(config-app-control)# category name SRC-CTRL-APPS
(edit-category[SRC-CTRL-APPS])# log-redundancy filter 60
(edit-category[SRC-CTRL-APPS])# exit
(config-app-control)# category name SRC-CTRL-APP
(edit-category[SRC-CTRL-APPS])# exit
(config-app-control)# category name DATABASE-APPS
(edit-category[DATABASE-APPS])# log-redundancy filter 60
(edit-category[DATABASE-APPS])# exit
(config-app-control)# category name BUSINESS-APPS
(edit-category[BUSINESS-APPS])# log-redundancy filter 60
(edit-category[BUSINESS-APPS])# exit
(config-app-control)# category name MISC-APPS
(edit-category[MISC-APPS])# log-redundancy filter 60
(edit-category[MISC-APPS])# exit
(config-app-control)# category name APP-UPDATE
(edit-category[APP-UPDATE])# log-redundancy filter 60
(edit-category[APP-UPDATE])# exit
(config-app-control)# category name BACKUP-APPS
(edit-category[BACKUP-APPS])# log-redundancy filter 60
(edit-category[BACKUP-APPS])# exit
(config-app-control)# category name EMAIL-APPS
(edit-category[EMAIL-APPS])# log-redundancy filter 60
(edit-category[EMAIL-APPS])# exit
(config-app-control)# category name VoIP-APPS
(edit-category[VoIP-APPS])# log-redundancy filter 60
(edit-category[VoIP-APPS])# exit
(config-app-control)# category name REMOTE-ACCESS
(edit-category[REMOTE-ACCESS])# log-redundancy filter 60
(edit-category[REMOTE-ACCESS])# exit
(config-app-control)# category name INFRASTRUCTURE
(edit-category[INFRASTRUCTURE])# log-redundancy filter 60
(edit-category[INFRASTRUCTURE])# exit
(config-app-control)# category name REMOTE-DEBUG
(edit-category[REMOTE-DEBUG])# log-redundancy filter 60
(edit-category[REMOTE-DEBUG])# exit
(config-app-control)# category name WEBMAIL
(edit-category[WEBMAIL])# log-redundancy filter 60
(edit-category[WEBMAIL])# exit
(config-app-control)# category name DOWNLOAD-APPS
(edit-category[DOWNLOAD-APPS])# log-redundancy filter 60
(edit-category[DOWNLOAD-APPS])# exit
(config-app-control)# category name FILETYPE-DETECTION
(edit-category[FILETYPE-DETECTION])# log-redundancy filter 60
(edit-category[FILETYPE-DETECTION])# exit
(config-app-control)# category name PROTOCOLS
(edit-category[PROTOCOLS])# log-redundancy filter 60
(edit-category[PROTOCOLS])# exit
(config-app-control)# category name BROWSING-PRIVACY
(edit-category[BROWSING-PRIVACY])# log-redundancy filter 60
(edit-category[BROWSING-PRIVACY])# exit
(config-app-control)# category name SOCIAL-NETWORKING
(edit-category[SOCIAL-NETWORKING])# log-redundancy filter 60
(edit-category[SOCIAL-NETWORKING])# exit
(config-app-control)# category name SCADA-APPS
(edit-category[SCADA-APPS])# log-redundancy filter 60
(edit-category[SCADA-APPS])# exit
(config-app-control)# category name MOBILE-APPS
(edit-category[MOBILE-APPS])# log-redundancy filter 60
(edit-category[MOBILE-APPS])# exit
(config-app-control)# category name WEB-CONFERENCING
(edit-category[WEB-CONFERENCING])# log-redundancy filter 60
(edit-category[WEB-CONFERENCING])# exit
(config-app-control)# category name STOCK-TRADING
(edit-category[STOCK-TRADING])# log-redundancy filter 60
(edit-category[STOCK-TRADING])# exit
(config-app-control)# category name WEB-BROWSER
(edit-category[WEB-BROWSER])# log-redundancy filter 60
(edit-category[WEB-BROWSER])# exit
Saving the above changes
(config-app-control)# commit
% Applying changes...
% Status returned processing command:
commit
% Changes made.
(config-app-control)#
Below are the commands that can be copied and pasted into an SSH session to be applied to a device.
configure
app-control
category name IM
log-redundancy filter 60
exit
category name MULTIMEDIA
log-redundancy filter 60
exit
category name P2P
log-redundancy filter 60
exit
category name PROXY-ACCESS
log-redundancy filter 60
exit
category name GAMING
log-redundancy filter 60
exit
category name SRC-CTRL-APPS
log-redundancy filter 60
exit
category name SRC-CTRL-APP
exit
category name DATABASE-APPS
log-redundancy filter 60
exit
category name BUSINESS-APPS
log-redundancy filter 60
exit
category name MISC-APPS
log-redundancy filter 60
exit
category name APP-UPDATE
log-redundancy filter 60
exit
category name BACKUP-APPS
log-redundancy filter 60
exit
category name EMAIL-APPS
log-redundancy filter 60
exit
category name VoIP-APPS
log-redundancy filter 60
exit
category name REMOTE-ACCESS
log-redundancy filter 60
exit
category name INFRASTRUCTURE
log-redundancy filter 60
exit
category name REMOTE-DEBUG
log-redundancy filter 60
exit
category name WEBMAIL
log-redundancy filter 60
exit
category name DOWNLOAD-APPS
log-redundancy filter 60
exit
category name FILETYPE-DETECTION
log-redundancy filter 60
exit
category name PROTOCOLS
log-redundancy filter 60
exit
category name BROWSING-PRIVACY
log-redundancy filter 60
exit
category name SOCIAL-NETWORKING
log-redundancy filter 60
exit
category name SCADA-APPS
log-redundancy filter 60
exit
category name MOBILE-APPS
log-redundancy filter 60
exit
category name WEB-CONFERENCING
log-redundancy filter 60
exit
category name STOCK-TRADING
log-redundancy filter 60
exit
category name WEB-BROWSER
log-redundancy filter 60
exit
From here you will want to review to ensure no errors have shown up as entering the next command will commit the above commands to the config.
commit
Related Articles
- How to force an update of the Security Services Signatures from the Firewall GUI
- How to upload security services signatures manually on Closed Environments?
- How to Create Gen 7 Settings File by Using the Online Migration Tool
Categories
- Firewalls > TZ Series
- Firewalls > SonicWall SuperMassive E10000 Series
- Firewalls > SonicWall SuperMassive 9000 Series
- Firewalls > SonicWall NSA Series
YES
NO