good ideas, I'll file internal ticket for the future enhancement
On Wed, Aug 4, 2010 at 11:58 AM, Ben DJ
> On Wed, Aug 4, 2010 at 11:10 AM, Vadim Kurland <vadim@...>
> > there is also %R - rule set name. Looks like I need to update
> Thanks, that's useful.
> > there is no inheritance from the branching rule to rules in the branch.
> > Logging label is either global (set in the firewall object settings) or
> > per-rule. You can make it "[%R] %N -- %A" at slight cost of adding rule
> > name to the main policy rule labels.
> Imo, it would be nice-to-have; Just makes setting up for debugging in
> complex policies easier.
> Global Logging Label: %N -- %A
> then at individual rules, selector to choose @ Logging Label: (1)
> unique label, (2) inherit, then append, (3) prepend, then inherit,
> also, @ additional Policy's referencing rule's Logging Label, same as
> above, PLUS option to define default inheritance to/through policy's
> Maybe also a flag for "firewall name". why? if I've a dozen remote
> firewalls, all generating local-to-machine logging that's being sent
> to a RemoteLogging syslog server, better than 'just' the hostname I
> can add to logs, a firewall name -- mirroring the name in FWBuilder's
> GUI mgmt intfc -- would make life easier.