cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
1351
Views
10
Helpful
2
Replies

FTD Logging?

pannkakan_1
Level 1
Level 1

Hello

  

I have installed FMC and I need to see which ports / IP are being blocked / allowed. I dont know where I can find this setting. I know in ASDM you had a realtime viewer that showed what was blocked from what IP etc. 

 

I think it might be under Connection Events. Here I see what I think I want but I dont see anything thats blocked only the stuff thats allowed. I tried to search for Blocked but nothing showed up. I know I have rules that is logging that wont allow some ports.

 

Is there a setting I've missed somewhere or is it impossible to see this kind of information on the FMC?

2 Replies 2

Dennis Mink
VIP Alumni
VIP Alumni

under analysis> events you should be able to search for an IP and see what is being blocked  (choose action block in your search criteria)

Please remember to rate useful posts, by clicking on the stars below.

As Dennis says, you should find this under Analysis -> Connections -> Events.

 

Provided by that you have enabled logging on that ACP.

Getting Started

Find answers to your questions by entering keywords or phrases in the Search bar above. New here? Use these resources to familiarize yourself with the community: