topic Re: Firepower Intrusion Events in Network Security

Firepower Intrusion Events

ChristopherCraddock66504 — Mon, 01 Mar 2021 21:23:11 GMT

Community,

I recently implemented FTD's and had a question. I am not seeing any Intrusion Events or Attackers populating in the Intrustion Events or Geolocation tabs in my dashboard. Is this because I have not yet enabled the "inspection" option in any of my ACP rules? I am still working out which rules I should be enabling "Inspection" on. Any help you can provide is greatly appreciated.

Thank you.

Re: Firepower Intrusion Events

balaji.bandi — Mon, 01 Mar 2021 22:27:29 GMT

yes until you configure you won't be able to see any events

here is the start guide : (advice to read the document, and understand before you implement in Live network) - start with Monitor mode.

https://www.cisco.com/c/en/us/td/docs/security/firepower/60/configuration/guide/fpmc-config-guide-v60/Getting_Started_with_Intrusion_Policies.html