Re: Firewall Logs

NetScreen's, like most devices, have a finite amount of memory
allocated for the storing of logs.  When the log buffer gets full, the
oldest logs will spool off.  If some sort of external logging system
is not set up, these logs are lost for all time.

All policies share the same log buffer space.  If you have logging set
on a very active policy, it will quickly fill up the log, causing log
entries on other policies to spool off the backside.

I would recommend you set up some sort of external logging mechanism
such as syslog and save your log files to it.  This way, all of your
logs are always saved.

Another idea would be to turn off logging on your any/any policies,
and only turn logging on for policies where you're concerned about
violations.

-- 
-Dave