topic Re: Discovery Policy in Network Security

Discovery Policy

keithcclark71 — Fri, 14 Oct 2022 12:15:42 GMT

I have Discovery Policy for Internal Zones where I am only getting network map for 2 of my FTD's internal zones and my 3rd FTD subnet is not showing up in the network map. I see connection events for this particular subnet but the PC icon for the events are greyed out. My policy is applied in the same way as the other FTD zones that are working. Anything I should look at here???

Re: Discovery Policy

Rob Ingram — Fri, 14 Oct 2022 12:42:51 GMT

@keithcclark71 did you create a custom network discovery rule above the default 0.0.0.0/0 rule for all your specific internal networks? Can you provide a screenshot of the rules please.

Re: Discovery Policy

keithcclark71 — Mon, 17 Oct 2022 12:19:10 GMT

Rob the .1 subnet is labeled CH in screenshot. This one subnet for whatever reason shows up greyed out and is not labeled as host object like my other subnets are. I don't see a 0.0.0.0/0 designation in the discovery policy either

Also last packet field I was curious on when that is logged? Is this based off the log at end of connection for rules?