topic Re: FMC Security Intelligence - logging only in Network Security

FMC Security Intelligence - logging only

Alex-Pr — Wed, 07 May 2025 13:57:59 GMT

I seem to recall years ago with an older version of FMC setting up the SI so it would generate a event in the event viewer but will not block the traffic.

I am needing to setup a new FW with 7.4.2 in inline routed mode and want to have the Security Intelligence to just log on matches but not block. I can find where to change the IDS to passive but not the SI. The SI seems to block for every match..

Thanks

Re: FMC Security Intelligence - logging only

nspasov — Wed, 07 May 2025 14:19:55 GMT

You right click on the Network and/or URL list and then pick "Monitor-only (do not block).

Thank you for rating helpful posts!

Re: FMC Security Intelligence - logging only

MHM Cisco World — Wed, 07 May 2025 14:43:04 GMT

Can you more elaborate

Thanks

MHM

Re: FMC Security Intelligence - logging only

Alex-Pr — Fri, 09 May 2025 16:25:39 GMT

Thank you.