The PC Browsing Page Was Rejected By IAM But Did Not Generate A Log

|
  • 174
  • 6

Issue Description

The PC browsing page was rejected by IAM but did not generate reject logs

Handling Process

1.Trying to create Access Policy disables all applications and still does not generate logs.
2.Check Access Policy and find that Services Policy is configured and all services are denied.
3.Disable Services Policy, then browse the pages that are forbidden, and rejection logs has been generated on IAM.

Root Cause

The behavior rejected by the Services Policy does not generate a log, and the priority of the Services is higher than the Application Policy, so the first thing that works is the Services Policy, so no logs are generated.

Solution

Disable Services Policy and use Application Policy.
Faisal Posted 16 Aug 2020 10:33
  
Thank you very much for the information ...
Faisal Posted 28 Oct 2020 09:00
  
Nice article ...
Faisal Posted 12 Dec 2020 08:46
  
Great info ...
Ellechar Lv4Posted 03 Feb 2021 11:40
  
Very nice infooooooooooooooooooooooooooooo
Faisal Posted 14 Mar 2021 07:35
  
Very informative …
Faisal Posted 30 May 2021 10:39
  
Nice guidance ...

I want to write a case
Doc ID: 2412
Author: Sangfor_SY
Updated: 2019-12-23 15:40
Version: