topic Re: Syslog data is different for different version of FTD in Network Security

Syslog data is different for different version of FTD

Salman111 — Thu, 02 Jan 2025 18:48:20 GMT

Hello,

There are two FTD 6.0 and other is 7.0 , both are managed by FMC 7.0.

Both FTD's are forwarding logs to syslog server but FTD with version 6 is sending way less logs as compare to version 7.

Both are configured the same way.

Re: Syslog data is different for different version of FTD

MHM Cisco World — Thu, 02 Jan 2025 19:03:05 GMT

What is different' ftd 6.0 is missing NAT log ?

MHM

Re: Syslog data is different for different version of FTD

Salman111 — Thu, 02 Jan 2025 19:11:35 GMT

Not only NAT but (7.0.6.2) log is much more detailed, including connection IDs, IP addresses, port numbers, traffic statistics, application protocol details, user information, and access control rules.

(6.6.5) log is a simpler, more basic log focusing on the teardown of a TCP translation with minimal details.

Re: Syslog data is different for different version of FTD

Marius Gunnerud — Thu, 02 Jan 2025 22:18:09 GMT

Could you let us know your logging configuration that you have for both the 6.6 and 7.0 FTDs as well as what you are logging (i.e. beginning of connection, end of connection, or both.)