cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
Announcements

Welcome to Cisco Firewalls Community


593
Views
0
Helpful
3
Replies
Highlighted
Beginner

ASA5506 - ASDM Firepower reporting

Thanks for reading,

I have an ASA with Firepower and have setup Malware protection and URL filtering and all looks good from the monitoring in that I'm seeing threats detected and mitigated - Image attached. 

I have 3 questions so any help appreciated;

1. how do I see what sites have been accessed or what has been blocked in more detail. I can for example see the categories blocking traffic but When I drill down into the category I just get a bulk number but no detail on what people are tryng to access.  Ideally I'd like to see what is being dropped in order to tune the urls list.

2. how can I translate the above back to an individual machine?  We do not have a domain controller so LDap etc.. not possible.

3. The Blocked content desitations are showing IP's but ideally I'd like to see the URLS or some reverse lookup.

Thanks in advance

Dave

Everyone's tags (1)
3 REPLIES 3
Beginner

Re: ASA5506 - ASDM Firepower reporting

Did anyone have any thoughts on item number 3?  I have the same issue using ASDM reports.  DNS is configured for the sfr module but IPs in the Destination report are not being resolved to names.  I know ASDM reporting and drilldown is limited, but I expected name resolution to work.

 

Thanks

Jeremy

 

 

Frequent Contributor

Re: ASA5506 - ASDM Firepower reporting

I am on my way to know better Firepower: maybe Firepower Management Center aka FMC server could give you more/better reports.
Beginner

Re: ASA5506 - ASDM Firepower reporting

Thanks Florin.  I agree FMC would be much better for reporting, and one day that might happen, but sadly I'm restricted to ASDM at the moment.  It just surprises me that it won't resolve the IPs to hostnames in the report, so I wonder if that's really a limitation of ASDM reporting or if it's something I need to change in the config.

 

Thanks

Jeremy

 

 

CreatePlease to create content
Content for Community-Ad
FusionCharts will render here