(Best Practice) Buffered
Log Forwarding from Device Default: Enabled | Allows each managed firewall to buffer logs
and send the logs at 30-second intervals to Panorama (not user configurable). Buffered
log forwarding is very valuable when the firewall loses connectivity
to Panorama. The firewall buffers log entries to its local hard
disk and keeps a pointer to record the last log entry that was sent
to Panorama. When connectivity is restored the firewall resumes
forwarding logs from where it left off. The disk space available
for buffering depends on the log storage quota for the firewall
model and the volume of logs that are pending roll over. If the
firewall was disconnected for a long time and the last log forwarded
was rolled over, all the logs from its local hard disk will be forwarded
to Panorama on reconnection. If the available space on the local
hard disk of the firewall is consumed, the oldest entries are deleted
to allow logging of new events. | 