cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
1525
Views
0
Helpful
2
Replies

Cisco FTD - Discovering host names instead of IP address in Cisco FTD

Hi Team,

 

In Cisco FTD we can see that under Analysis->Connection->Events> as shown below. My question is instead of seeing the IP addresses here can we see the actual hostname of all the computers who are making the connection? 

Connection events.PNG

 

Even under Intrusion>events? Do we see the IP address, is their way we can see hostnames instead of IP?

 

Thanks

Basavaraj

2 Replies 2

balaji.bandi
Hall of Fame
Hall of Fame

Those are RFC1918 address range, you have any DNS / DHCP resolve system available in  the network to resolve.

 

here is how FQDN resolve the hostnames.(hope that helps you).

 

https://www.cisco.com/c/en/us/support/docs/security/firepower-ngfw/214698-understand-fqdn-feature-on-firepower-thr.html

BB

***** Rate All Helpful Responses *****

How to Ask The Cisco Community for Help

Have configured the Internal DNS address and all, but I'm not sure in connections events instead of IP can we see the hostname of the system making the requests?

Thanks
Basavaraj
Review Cisco Networking for a $25 gift card