To enable logging for unclassified sessions:
This opens the Policy tab.
Security events about sessions starting and ending end up in the Session log.
Logging for unclassified sessions is enabled.
If logging of unclassified sessions starting or ending is disabled, but it is enabled in the rule that matches the session, a log record about the session starting is sent at the time when the session is classified.
Page top