topic Re: FTD Logging? in Network Security

FTD Logging?

pannkakan_1 — Fri, 21 Feb 2020 16:06:32 GMT

Hello

I have installed FMC and I need to see which ports / IP are being blocked / allowed. I dont know where I can find this setting. I know in ASDM you had a realtime viewer that showed what was blocked from what IP etc.

I think it might be under Connection Events. Here I see what I think I want but I dont see anything thats blocked only the stuff thats allowed. I tried to search for Blocked but nothing showed up. I know I have rules that is logging that wont allow some ports.

Is there a setting I've missed somewhere or is it impossible to see this kind of information on the FMC?

Re: FTD Logging?

Dennis Mink — Wed, 15 Aug 2018 12:17:38 GMT

under analysis> events you should be able to search for an IP and see what is being blocked (choose action block in your search criteria)

Re: FTD Logging?

Johan Anderstrom — Wed, 15 Aug 2018 14:34:05 GMT

As Dennis says, you should find this under Analysis -> Connections -> Events.

Provided by that you have enabled logging on that ACP.