Print this pagePrint this page

Email this topicEmail this topic

View PDFView PDF

Download EPUBDownload EPUB

logging (application-policy-config-mode)

Enables DPI application recognition logging. It also sets the logging level.

DPI is an advanced packet analysis technique, which analyzes packet and packet content headers to determine the nature of network traffic. When enabled, DPI inspects packets of all flows to identify applications (such as, Netflix, Twitter, Facebook, etc.) and extract metadata (such as, host name, server name, TCP-RTT, etc.) for further use by the WiNG firewall.

Supported in the following platforms:

  • Access Points — AP-7522, AP 7532

  • Service Platforms — NX 5500, NX 7510, NX 95XX, NX 96XX, VX 9000

Syntax

logging [level|on]
logging on
logging level [<0-7>|alerts|critical|debugging|emergencies|errors|informational|
notifications|warnings]

Parameters

logging on
logging on Enables logging of application recognition hits made by the DPI engine. This option is disabled by default. 
logging level [<0-7>|alerts|critical|debugging|emergencies|errors|informational|notifications|warnings]
logging level [<0-7>|alerts| critical|debugging| emergencies|errors| informational| notifications| warnings] Sets the logging level for application recognition hits made by the DPI engine. This option is disabled by default.
  • <0-7> – Sets the message logging severity level on a scale of 0 - 7
  • emergencies – Severity level 0: System is unusable
  • alerts – Severity level 1: Requires immediate action
  • critical – Severity level 2: Critical conditions
  • errors – Severity level 3: Error conditions
  • warnings – Severity level 4: Warning conditions
  • notifications – Severity level 5: Normal but significant conditions (this is the default setting)
  • informational – Severity level 6: Informational messages
  • debugging – Severity level 7: Debugging messages

Examples

nx9500-6C8809(config-app-policy-Bing)#logging level critical
nx9500-6C8809(config-app-policy-Bing)#show context
application-policy Bing
 description "This application policy allows Bing search engine packets"
 enforcement-time days weekdays start-time 12:30 end-time 20:00
 allow application Bing precedence 1
 allow app-category business precedence 2
 deny app-category "social networking" precedence 3
 logging level critical
nx9500-6C8809(config-app-policy-Bing)#

Related Commands

no (application-policy-config-mode) Resets the logging level to default (notifications). And the no > logging > on command disables DPI logging.
Published June 2019prev | next

Email this topicEmail this topic

Print this pagePrint this page