I have 5 Zone base firewalls running on 2921 routers. The ire walls work finer, the logging leaves a lot to be desired. Each policy has the default class set to drop log, but the logging is not consistent. Some policies appear to get most, if not all...