Why does an SF_CB_IP-related security policy appear in the event log?

Zyxel_Jeff

Question :

Why is there an SF_CB_IP-related security policy event log? For instance, the source IP 10.10.123.33 was blocked by the security policy"SF_CB_10.10.123.33".

However, there is no security policy called "SF_CB_10.10.123.33".

Answer :

The event log message 'SF_CB' stands for Security Firewall_Client Block. The reason why IP 10.10.123.33 was blocked by the 'SF_CB_10.10.123.33' rule is that the user added the client 10.10.123.33 to the Block List. The user can navigate to Site-wide > Clients > Show policy clients to verify this.

If the user wants to allow the client 10.10.123.33 to access the internet again, they can change the client's status to 'Normal.