08-15-2018 02:38 AM - edited 02-21-2020 08:06 AM
Hello
I have installed FMC and I need to see which ports / IP are being blocked / allowed. I dont know where I can find this setting. I know in ASDM you had a realtime viewer that showed what was blocked from what IP etc.
I think it might be under Connection Events. Here I see what I think I want but I dont see anything thats blocked only the stuff thats allowed. I tried to search for Blocked but nothing showed up. I know I have rules that is logging that wont allow some ports.
Is there a setting I've missed somewhere or is it impossible to see this kind of information on the FMC?
08-15-2018 05:17 AM
under analysis> events you should be able to search for an IP and see what is being blocked (choose action block in your search criteria)
08-15-2018 07:34 AM
As Dennis says, you should find this under Analysis -> Connections -> Events.
Provided by that you have enabled logging on that ACP.
Find answers to your questions by entering keywords or phrases in the Search bar above. New here? Use these resources to familiarize yourself with the community: