https://community.cisco.com/t5/network-security/ftd-logging-to-algosec/m-p/4864689#M1102146 <P>FTD doesn't use 106100, it uses the following:</P> <P>430002 - log at beginning</P> <P>430003 - log at end</P> Thu, 29 Jun 2023 13:53:41 GMT Marius Gunnerud 2023-06-29T13:53:41Z https://community.cisco.com/t5/network-security/ftd-logging-to-algosec/m-p/4401920#M1080721 <P>Has anyone here set up logging from FTD to Algosec?&nbsp; The only documentation I have found on the Algosec site with regards to logging was for ASA and there it stated that syslog message ID 106100 is needed.&nbsp; This syslog ID is not available in FTD after 6.2. So I am wondering if anyone has successfully set up logging towards Algosec and which syslog message IDs were used?</P> Wed, 12 May 2021 12:57:06 GMT https://community.cisco.com/t5/network-security/ftd-logging-to-algosec/m-p/4401920#M1080721 Marius Gunnerud 2021-05-12T12:57:06Z https://community.cisco.com/t5/network-security/ftd-logging-to-algosec/m-p/4864674#M1102142 <P>Not using Algosec, running into a similar problem though. Have you ever managed to fix/solve it?</P> Thu, 29 Jun 2023 13:31:17 GMT https://community.cisco.com/t5/network-security/ftd-logging-to-algosec/m-p/4864674#M1102142 1_am_r00t 2023-06-29T13:31:17Z https://community.cisco.com/t5/network-security/ftd-logging-to-algosec/m-p/4864682#M1102143 <P>Yes, solved this by enabling logging to syslog server under each ACP rule.&nbsp; Once I did this syslog was sent.</P> Thu, 29 Jun 2023 13:37:38 GMT https://community.cisco.com/t5/network-security/ftd-logging-to-algosec/m-p/4864682#M1102143 Marius Gunnerud 2023-06-29T13:37:38Z https://community.cisco.com/t5/network-security/ftd-logging-to-algosec/m-p/4864683#M1102144 <P>Interesting. I have enabled logging for the majority of ACP rules (see screenshot attached), however, 106100 is not being sent. Maybe it is version specific - we're using 6.6.5.2 in this deployment.</P> Thu, 29 Jun 2023 13:41:16 GMT https://community.cisco.com/t5/network-security/ftd-logging-to-algosec/m-p/4864683#M1102144 1_am_r00t 2023-06-29T13:41:16Z https://community.cisco.com/t5/network-security/ftd-logging-to-algosec/m-p/4864689#M1102146 <P>FTD doesn't use 106100, it uses the following:</P> <P>430002 - log at beginning</P> <P>430003 - log at end</P> Thu, 29 Jun 2023 13:53:41 GMT https://community.cisco.com/t5/network-security/ftd-logging-to-algosec/m-p/4864689#M1102146 Marius Gunnerud 2023-06-29T13:53:41Z