Wireless Access

I ran in to an issue at a customes site on Friday when trying to interogate the datapath session table for a particular client, on closer inspection the table didn't have any "denied traffic" in the session table. i've re-confirmed this today on our corporate controller were it fails todisplay any "denied traffic" for the entire datatpath session table, both controllers were 3000 controllers running 6.1.3.4 code.

Is this a recongnised issue?

i think you never see blocked connection in datapath because are "blocked",

you can see firewall hits counters

maybe you can see somethin in syslog if you enable it and creade a block rule with log flag in firewall if you want to see discarded connection details

for example this is my blocked session log

"Jan 18 09:33:00 :124006:  <WARN> |authmgr|  {24} ICMP srcip=192.168.0.100 dstip=192.168.1.128, type=8, code=0, sequence=2091, id=8214, action=deny, role=Ospiti-guest-logon, policy=bloccaspoof

No this is definitely something that used to be there, I've used it many a time, just doesn't appear to be there now.

you're right, flag D..