topic Re: FWSM and logging in Network Security https://community.cisco.com/t5/network-security/fwsm-and-logging/m-p/1054287#M895214 <HTML><HEAD></HEAD><BODY><P>Did you clear the translation table and connection table after making the changes?</P><P></P><P>clear xlate</P><P>clear local-host</P><P></P><P>I wont hurt to remove/re-apply the ACL on the interface, just in case.</P><P></P><P>Regards</P><P></P><P>Farrukh</P></BODY></HTML> Sat, 11 Oct 2008 10:14:21 GMT Farrukh Haroon 2008-10-11T10:14:21Z FWSM and logging https://community.cisco.com/t5/network-security/fwsm-and-logging/m-p/1054286#M895212 <P>trying to troubleshoot a host that sits behind a configured interface on a FWSM running 3.1(7). There is an ACL applied to this interface and its filtering other traffic for this host I am troubleshooting and it shows hits on the acl's, however, I put an entry in this acl for this host going to a particular destination and assigned it to line 1, and when the host tries to go to this destination (by ip, not hostname) I get no hits on the ACL. He gets a connection refused which tells me is he making it to the remote host, but why I'm not seeing a hit when its on line 1 is confusing me. I'm quite familiar with acl's so I know its applied correctly, no typo's, etc. And I also and filtering on the address on my syslog box and I don't see his attempts making it to the syslog. In fact, I only see deny traffic on the syslog for ANY address, so it may be my logging levels are not set right. Do I need to set it to trap at the debugging level to see permitted connections? In any case, why is this hitcounter not incrementing?</P> Mon, 11 Mar 2019 13:56:15 GMT https://community.cisco.com/t5/network-security/fwsm-and-logging/m-p/1054286#M895212 mjsully 2019-03-11T13:56:15Z Re: FWSM and logging https://community.cisco.com/t5/network-security/fwsm-and-logging/m-p/1054287#M895214 <HTML><HEAD></HEAD><BODY><P>Did you clear the translation table and connection table after making the changes?</P><P></P><P>clear xlate</P><P>clear local-host</P><P></P><P>I wont hurt to remove/re-apply the ACL on the interface, just in case.</P><P></P><P>Regards</P><P></P><P>Farrukh</P></BODY></HTML> Sat, 11 Oct 2008 10:14:21 GMT https://community.cisco.com/t5/network-security/fwsm-and-logging/m-p/1054287#M895214 Farrukh Haroon 2008-10-11T10:14:21Z