ps3cheats

I'm now studying for the CCSA certificate, after installing the enforcement module on a windows machine and setting rules and natting, I think everything is working just fine, but what confuses me is that all traffic originating from the enforcement module (Web browsing, for example) is allowed, and it's not even logged in the smartview tracker, though I've specified the Clean up rule.

is anything originating from the enforcement module, allowed by default.

ps3cheats

"is it not secure to leave this option checked"? Depends on the level of risk you are willing to take. It's probably best to uncheck this, but then you have to manually add rules to allow things like sending logs to a log server or policy gets from the enforcement module to the management server. It is also useful to leave this on for troubleshooting issues.

What "Before Last" means is that this rule is applied before the last rule in your firewall policy (usually a "drop all" rule). Other options are "first" and "last" which means apply rule before all other rules or after all other rules.

If you want the global policies to be logged then there is an option to log implied rules in the global policies setting.

Cheers