topic Re: CSF 1210 CE FTD Event viewer problem in Network Security

CSF 1210 CE FTD Event viewer problem

Brunetta7 — Thu, 12 Jun 2025 14:18:06 GMT

Good morning everyone,
I noticed that on my CSF 1210 CE FTD, using the Firewall Device Manager, Monitoring - Event viewer section,
events are received and displayed only if the page is open.
It is not possible to view events that occurred when I am not connected to the firewall device manager (for example two hours before)
Is this normal behavior or is there a problem?
How can I view all the logs for which I have enabled tracking?
Thanks to anyone who can give me some information.
Have a nice day

Re: CSF 1210 CE FTD Event viewer problem

ahollifield — Fri, 13 Jun 2025 15:31:06 GMT

Friends don't let friends use FDM. Use FMC.

Re: CSF 1210 CE FTD Event viewer problem

Brunetta7 — Mon, 16 Jun 2025 15:13:59 GMT

Sorry, I don't understand.

Does this mean that FDM is not working well and that to get the previous logs I have to use FMC or a SYSLOG Server?

Re: CSF 1210 CE FTD Event viewer problem

Marvin Rhoads — Wed, 18 Jun 2025 15:19:28 GMT

FDM only displays real time logs. It does not show anything historical. As you surmised, you would have to use a different solution such as FMC (either on-premises or cloud-delivered as part of Security Cloud Control), external syslog server, etc. to retain and query historical data.