topic Send Connections Events to while Event Viewer Option Selected at FMC in Network Security

Send Connections Events to while Event Viewer Option Selected at FMC

subrun.jamil — Fri, 21 Feb 2020 17:08:14 GMT

Hello , For a Firewall Rule at One 8370 managed from FMC , I see "Send Connection Events to" Selected as "Event Viewer" . But "Log at Beginning of Connection" and "Log at End of Connection" is not selected.

Having said that what should we expect , if traffic is matching this rule and not allowed at end ( i mean destination side Application ) , there will be any ALLOWED logs ?

Re: Send Connections Events to while Event Viewer Option Selected at FMC

Marvin Rhoads — Wed, 15 May 2019 14:34:14 GMT

I would not expect any connection events based on that rule. You need to choose one (or both) of the options at the top of the box.

Re: Send Connections Events to while Event Viewer Option Selected at FMC

subrun.jamil — Wed, 22 May 2019 14:38:13 GMT

Ok Marvin, while selecting only send connection events to event viewer while both option not selected what we are getting ?

Re: Send Connections Events to while Event Viewer Option Selected at FMC

Marvin Rhoads — Wed, 22 May 2019 14:46:46 GMT

I would not expect you to get anything in Event Viewer (as far as connection events).