05-08-2024 11:44 AM
Hi,
Can we generate any report (Events,Session) in FDM like FMC?
We have applied Intrusion and Malware policy. And it's a good that it is blocking. But from the event log of any 'Block' action we can see only Initiator IP and Responder IP but there is nothing in 'Reason' why it is blocked. Customer may ask to find out in which category this communication is getting blocked?
05-08-2024 08:06 PM
FDM reporting is extremely limited and you cannot extract the same data as you can with FMC. Also, FDM does not retain historical data.
05-08-2024 08:31 PM
Hi Marvin,
Thanks a lot.
What about my other query?
We have applied Intrusion and Malware policy. And it's a good that it is blocking. But from the event log of any 'Block' action we can see only Initiator IP and Responder IP but there is nothing in 'Reason' why it is blocked. Customer may ask to find out in which category this communication is getting blocked?
05-09-2024 12:31 AM
@King_1988 if you scroll down in the details you should see the policy rule that blocks the traffic:
Discover and save your favorite ideas. Come back to expert answers, step-by-step guides, recent topics, and more.
New here? Get started with these tips. How to use Community New member guide