ACL logs
 
   
  ACL logs can provide insight into permitted and denied network traffic. 
  
 
	 ACL logs maintain the following properties: 
	 
 
		- Supported for all ACL types (MAC, IPv4, and IPv6) 
		
- Supported for incoming network traffic only 
- Supported for all user interfaces (but not on management interfaces) on which ACLs can be applied 
		
- May be CPU-intensive 
		
You can also enable Raslog logging for ACLs.