topic How to check realtime logs in CISCO FTD 1120? in Network Security

How to check realtime logs in CISCO FTD 1120?

mrn270 — Wed, 29 May 2024 01:18:39 GMT

Hi All,

I have cisco FTD which has got few firewall rule with logging enables for eahc of the rules. It is configured correctly to communicate to internet. Subnet behind it can go to internet . For the live connection i am unable to see event logs. So, how can i enable logging in FTD to see the live logs ? So that i can identify source and destinaiton IP and create my firewall rules require.

please assist.

Thanks

Re: How to check realtime logs in CISCO FTD 1120?

balaji.bandi — Wed, 29 May 2024 05:01:12 GMT

is this FTD Managed by using FDM or FMC ?

check below thread for Realtime monitor logs using FDM or FMC L

https://community.cisco.com/t5/network-security/cisco-ftd-fdm-event-viewer-or-realtime-monitoring/td-p/4431513

Re: How to check realtime logs in CISCO FTD 1120?

buffkata — Wed, 29 May 2024 15:00:22 GMT

If FMC is used - to get the live traffic go to Analysis > Unified Events

Re: How to check realtime logs in CISCO FTD 1120?

mohamedlamine — Wed, 29 May 2024 15:49:44 GMT

is it managed by fmc or ftd ?

Re: How to check realtime logs in CISCO FTD 1120?

Marvin Rhoads — Wed, 29 May 2024 16:52:32 GMT

Follow the link provided by @balaji.bandi . Whether the device is FDM- or FMC-managed, you need to enable logging for your Access Control Policy rules - it's not on by default.