04-14-2020 03:41 AM
Hi Team,
In Cisco FTD we can see that under Analysis->Connection->Events> as shown below. My question is instead of seeing the IP addresses here can we see the actual hostname of all the computers who are making the connection?
Even under Intrusion>events? Do we see the IP address, is their way we can see hostnames instead of IP?
Thanks
Basavaraj
04-14-2020 05:26 AM
Those are RFC1918 address range, you have any DNS / DHCP resolve system available in the network to resolve.
here is how FQDN resolve the hostnames.(hope that helps you).
04-16-2020 02:16 AM
Discover and save your favorite ideas. Come back to expert answers, step-by-step guides, recent topics, and more.
New here? Get started with these tips. How to use Community New member guide