cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
1158
Views
0
Helpful
1
Replies

fmc and logging rules

baselzind
Level 6
Level 6

i have fmc+ftd 2110 and almost 100 rules . can i enable logging for all rules or will it cause cpu and storage issue for the fmc?

1 Reply 1

Marvin Rhoads
Hall of Fame
Hall of Fame

If the events per second overwhelm the FMC it will just drop some events. It will note it with a health monitor alert ("frequent drain of unprocessed events").

Ability to process events depends on the model of FMC. Storage is not a significant issue - oldest events will be dropped out of storage once the database reaches its limit.

Getting Started

Find answers to your questions by entering keywords or phrases in the Search bar above. New here? Use these resources to familiarize yourself with the community:

Review Cisco Networking products for a $25 gift card