Can not see incoming connection events in FMC

[zmutlu]

Hello, 

I` am using FMC 7.0.5, connected Firepower 1120.

Test PC connected to Inside port of Firepower IPS, Outside port watching to the Internet, policy (logging configured) and routing configured. I can connect from the Internet to Test PC which is inside network, but I can not see any incoming connections In Analysis-Connections-Events and when I' am trying to ping 8.8.8.8 From Test PC which is inside this information is available in Connection Events and Intrusion Events menu.

Could you please navigate me, what do I have to check to see incoming events?

Thank you. 

[Rob Ingram]

@zmutlu I assume you've enabled logging on all the rules you've configured?

From the CLI of the FTD run the command, system support firewall-engine-debug filter on your test PC IP address, generate traffic to confirm traffic is routed through the FTD and which rule the traffic matched.

[MHM Cisco World]

did you success register the FTD into FMC ?

[zmutlu]

FTD registered in FMC successfully.

[MHM Cisco World]

> sftunnel-status

can you share this  

[zmutlu]

You need all of the info or exact info, for example PEER INFO, RUN STATUS?

[MHM Cisco World]

only peer INFO 

[zmutlu]

Here is info in attached file.

[MHM Cisco World]

sw_version 7.0.5
	sw_build 72
	Management Interfaces: 1
	eth0 (control events) 00.00.00.00,
	Peer channel Channel-A is valid  type (CONTROL), using 'managemen', connected to '00.00.00.00' via '00.00.00.00'
	Peer channel Channel-B is valid  type (EVENT), using 'managemen', connected to '00.00.00.00' via '00.00.00.00'

You are not register this FW to FMC 
the IP is not appear!!! 

[zmutlu]

I removed original IP with 00.00.00.00

[MHM Cisco World]

OK I get it 
now show time in FTD and check the time in FMC are both same ?

[zmutlu]

Yes, time is the same on both.

[MHM Cisco World]

security intelligence event <<- can check this see if traffic is BLK by any security policy 

[zmutlu]

There are no records at all.

[MHM Cisco World]

https://community.cisco.com/t5/network-security/security-intelligence-events-table-is-empty-on-fmc/td-p/3092339

Check this