Support on SonicWall Products, Services and Solutions
Browse Knowledgebase by Category
How to modify App Control Advanced log-redundancy filter settings from Command Line Interface (CLI)
03/26/2020 
14 
9234
DESCRIPTION:
This article provides explains the steps to configure log-redundancy filter from command line interface which is another way of managing the Dell SonicWall Firewall in the event if Web management is not possible.
CAUSE:
Download the TSR from System | Diagnostics from the SonicWall in question and review the current Log redundancy settings, see TSR expert of TZ 600 showing Category IM having the same 0 value:
--App Control Advanced--
Signature Database : Downloaded
Enable App Control : Enabled
--App Control Categories--
Category: IM
Block: Disabled Log: Use Global Setting
Included Users/Groups: All Excluded Users/Groups: None
Included IP Address: All Excluded IP Address: None
Schedule: Always On
Log Redundancy Filter (seconds): 0
RESOLUTION:
Login to the CLI from SSH or Conosle:
Example below are taken from a SSH session to a TZ 600 running 6.2.5.1 Firmware.
How to login to the SonicWall UTM appliance using the Command Line Interface (CLI) (SW6180)
https://support.SonicWall.com/kb/sw6180
In the following example all the app control categories' log-redundancy filter settings will set to 60 sec
admin@TZ600> configure
config(TZ600)# app-control
(config-app-control)# category name IM
(edit-category[IM])# log-redundancy filter 60
(edit-category[IM])# exit
(config-app-control)# category name MULTIMEDIA
(edit-category[MULTIMEDIA])# log-redundancy filter 60
(edit-category[MULTIMEDIA])# exit
(config-app-control)# category name P2P
(edit-category[P2P])# log-redundancy filter 60
(edit-category[P2P])# exit
(config-app-control)# category name PROXY-ACCESS
(edit-category[PROXY-ACCESS])# log-redundancy filter 60
(edit-category[PROXY-ACCESS])# exit
(config-app-control)# category name GAMING
(edit-category[GAMING])# log-redundancy filter 60
(edit-category[GAMING])# exit
(config-app-control)# category name SRC-CTRL-APPS
(edit-category[SRC-CTRL-APPS])# log-redundancy filter 60
(edit-category[SRC-CTRL-APPS])# exit
(config-app-control)# category name SRC-CTRL-APP
(edit-category[SRC-CTRL-APPS])# exit
(config-app-control)# category name DATABASE-APPS
(edit-category[DATABASE-APPS])# log-redundancy filter 60
(edit-category[DATABASE-APPS])# exit
(config-app-control)# category name BUSINESS-APPS
(edit-category[BUSINESS-APPS])# log-redundancy filter 60
(edit-category[BUSINESS-APPS])# exit
(config-app-control)# category name MISC-APPS
(edit-category[MISC-APPS])# log-redundancy filter 60
(edit-category[MISC-APPS])# exit
(config-app-control)# category name APP-UPDATE
(edit-category[APP-UPDATE])# log-redundancy filter 60
(edit-category[APP-UPDATE])# exit
(config-app-control)# category name BACKUP-APPS
(edit-category[BACKUP-APPS])# log-redundancy filter 60
(edit-category[BACKUP-APPS])# exit
(config-app-control)# category name EMAIL-APPS
(edit-category[EMAIL-APPS])# log-redundancy filter 60
(edit-category[EMAIL-APPS])# exit
(config-app-control)# category name VoIP-APPS
(edit-category[VoIP-APPS])# log-redundancy filter 60
(edit-category[VoIP-APPS])# exit
(config-app-control)# category name REMOTE-ACCESS
(edit-category[REMOTE-ACCESS])# log-redundancy filter 60
(edit-category[REMOTE-ACCESS])# exit
(config-app-control)# category name INFRASTRUCTURE
(edit-category[INFRASTRUCTURE])# log-redundancy filter 60
(edit-category[INFRASTRUCTURE])# exit
(config-app-control)# category name REMOTE-DEBUG
(edit-category[REMOTE-DEBUG])# log-redundancy filter 60
(edit-category[REMOTE-DEBUG])# exit
(config-app-control)# category name WEBMAIL
(edit-category[WEBMAIL])# log-redundancy filter 60
(edit-category[WEBMAIL])# exit
(config-app-control)# category name DOWNLOAD-APPS
(edit-category[DOWNLOAD-APPS])# log-redundancy filter 60
(edit-category[DOWNLOAD-APPS])# exit
(config-app-control)# category name FILETYPE-DETECTION
(edit-category[FILETYPE-DETECTION])# log-redundancy filter 60
(edit-category[FILETYPE-DETECTION])# exit
(config-app-control)# category name PROTOCOLS
(edit-category[PROTOCOLS])# log-redundancy filter 60
(edit-category[PROTOCOLS])# exit
(config-app-control)# category name BROWSING-PRIVACY
(edit-category[BROWSING-PRIVACY])# log-redundancy filter 60
(edit-category[BROWSING-PRIVACY])# exit
(config-app-control)# category name SOCIAL-NETWORKING
(edit-category[SOCIAL-NETWORKING])# log-redundancy filter 60
(edit-category[SOCIAL-NETWORKING])# exit
(config-app-control)# category name SCADA-APPS
(edit-category[SCADA-APPS])# log-redundancy filter 60
(edit-category[SCADA-APPS])# exit
(config-app-control)# category name MOBILE-APPS
(edit-category[MOBILE-APPS])# log-redundancy filter 60
(edit-category[MOBILE-APPS])# exit
(config-app-control)# category name WEB-CONFERENCING
(edit-category[WEB-CONFERENCING])# log-redundancy filter 60
(edit-category[WEB-CONFERENCING])# exit
(config-app-control)# category name STOCK-TRADING
(edit-category[STOCK-TRADING])# log-redundancy filter 60
(edit-category[STOCK-TRADING])# exit
(config-app-control)# category name WEB-BROWSER
(edit-category[WEB-BROWSER])# log-redundancy filter 60
(edit-category[WEB-BROWSER])# exit
Saving the above changes
(config-app-control)# commit
% Applying changes...
% Status returned processing command:
commit
% Changes made.
(config-app-control)#
Below are the commands that can be copied and pasted into an SSH session to be applied to a device.
configure
app-control
category name IM
log-redundancy filter 60
exit
category name MULTIMEDIA
log-redundancy filter 60
exit
category name P2P
log-redundancy filter 60
exit
category name PROXY-ACCESS
log-redundancy filter 60
exit
category name GAMING
log-redundancy filter 60
exit
category name SRC-CTRL-APPS
log-redundancy filter 60
exit
category name SRC-CTRL-APP
exit
category name DATABASE-APPS
log-redundancy filter 60
exit
category name BUSINESS-APPS
log-redundancy filter 60
exit
category name MISC-APPS
log-redundancy filter 60
exit
category name APP-UPDATE
log-redundancy filter 60
exit
category name BACKUP-APPS
log-redundancy filter 60
exit
category name EMAIL-APPS
log-redundancy filter 60
exit
category name VoIP-APPS
log-redundancy filter 60
exit
category name REMOTE-ACCESS
log-redundancy filter 60
exit
category name INFRASTRUCTURE
log-redundancy filter 60
exit
category name REMOTE-DEBUG
log-redundancy filter 60
exit
category name WEBMAIL
log-redundancy filter 60
exit
category name DOWNLOAD-APPS
log-redundancy filter 60
exit
category name FILETYPE-DETECTION
log-redundancy filter 60
exit
category name PROTOCOLS
log-redundancy filter 60
exit
category name BROWSING-PRIVACY
log-redundancy filter 60
exit
category name SOCIAL-NETWORKING
log-redundancy filter 60
exit
category name SCADA-APPS
log-redundancy filter 60
exit
category name MOBILE-APPS
log-redundancy filter 60
exit
category name WEB-CONFERENCING
log-redundancy filter 60
exit
category name STOCK-TRADING
log-redundancy filter 60
exit
category name WEB-BROWSER
log-redundancy filter 60
exit
From here you will want to review to ensure no errors have shown up as entering the next command will commit the above commands to the config.
commit
