Step 5: Enable Logging for Traffic that Doesn’t Match Any Rules

Select the interzone-default row in the rulebase and click
Override
to enable editing on this rule.
Select the
interzone-default
rule name to open the rule for editing.
On the
Actions
tab, select
Log at Session End
and click
OK
.
Create a custom report to monitor traffic that hits this rule.
Select
Monitor
Manage Custom Reports
.
Add
a report and give it a descriptive
Name
.
Set the
Database
to
Traffic Summary
.
Select the
Scheduled
check box.
Add the following to the Selected Columns list:
Rule
,
Application
,
Bytes
,
Sessions
.
Set the desired
Time Frame
,
Sort By
and
Group By
fields.
Define the query to match traffic hitting the interzone-default rule:
(rule eq 'interzone-default')
Commit
the changes you made to the rulebase.