topic Re: Cisco FTD Various Logging Configuration Differences in Network Security

Cisco FTD Various Logging Configuration Differences

peymansarayeli — Thu, 20 Jan 2022 11:38:05 GMT

Hi Guys, I hope you are doing fine.

I have a question regarding Logging configuration in FTD.

As you may have observed, in Policy section there are two possibilities where you can edit Loggings:

1- Policy > Access Control > Logging

2- In each specific Access Rule there is a Logging section between "Comments" and "Inspection"

I could not find any proper documents that explains these separate sections clearly. Could you please help me understand them and the differences between them?

Best,

Peyman

Re: Cisco FTD Various Logging Configuration Differences

balaji.bandi — Thu, 20 Jan 2022 14:06:56 GMT

If you looking Logging for ACP basis, then you need to choose the below one : ( rather using main logging)

Re: Cisco FTD Various Logging Configuration Differences

peymansarayeli — Thu, 20 Jan 2022 14:22:45 GMT

Dear @balaji.bandi,

Thanks for your response.

Basically I want to to know what is the difference between Logging here:

and here:

Best

Re: Cisco FTD Various Logging Configuration Differences

balaji.bandi — Thu, 20 Jan 2022 15:30:34 GMT

The main Logging to do with syslog

Settings for access control policy logging allow you to configure default syslog destinations and syslog alert for the current access control policy. The settings are applicable to the access control policy and all the included SSL, prefilter, and intrusion policies unless the syslog destination settings are explicitly overridden with custom settings in included rules and policies.

Re: Cisco FTD Various Logging Configuration Differences

peymansarayeli — Mon, 24 Jan 2022 08:44:17 GMT

Dear @balaji.bandi

Thanks for your explanation.

Correct me if I am wrong; If we configure logging in the general page of ACP, it will be applied to all rules until we change logging configuration on a specific rule?

Best,

Peyman

Re: Cisco FTD Various Logging Configuration Differences

peymansarayeli — Tue, 25 Jan 2022 12:55:35 GMT

Hi all,

I found this video very useful.

https://www.youtube.com/watch?v=q8zrQ-2PUXk

Thanks @balaji.bandi

Re: Cisco FTD Various Logging Configuration Differences

balaji.bandi — Tue, 25 Jan 2022 14:15:10 GMT

Thank you for the feedback, yes about share related to your query, but you made it by now..