Perform the following steps to log the firewall events and view firewall logs:
1. Enable the Log feature for firewall rules. See Configuring a Firewall Rule.
2. Go to the Device Management > Logs > Log Settings page to configure the log settings. You must enable the Log feature, set the log buffer size, and specify the Email Alert, Remote Logs, and Local Log settings if you want to send firewall logs to a specified email address, save firewall logs to your local syslog daemon, and save firewall logs to a specified remote syslog server. See Configuring Log Settings, page 376.
3. Go to the Device Management > Logs > Log Facilities page to enable Email Alert, Local Log, and/or Remote Log for the firewall facility.
• To send firewall logs to a specified email address, check the box of Email Alert for the Firewall facility.
• To save firewall logs to the local syslog daemon, check the box of Local Log for the Firewall facility.
• To save firewall logs to the remote syslog server, check the box of Remote Log for the Firewall facility.
4. After you configure the firewall logging settings, go to the Device Management > Logs > View Logs page to view firewall logs. Choose Firewall from the Log Facility drop-down list to view firewall logs. You can filter firewall logs by the severity level or by the source and destination IP addresses. See Viewing Logs, page 374.