06-16-2022 07:13 AM
Where do I go to enable columns related to the Encryption Visibility Engine? In version 7.2 the documentation states to view information related to EVE, you must enable the columns but I cannot find where to do that. Anyone know where to enable this?
Solved! Go to Solution.
06-16-2022 08:51 AM
Go into the Table View of connection events and then click the X on any column. That will bring up the dialog box to enable or disable columns where you will see the EVE-specific columns.
06-16-2022 08:51 AM
Go into the Table View of connection events and then click the X on any column. That will bring up the dialog box to enable or disable columns where you will see the EVE-specific columns.
06-16-2022 01:17 PM
Thanks, is there any way to keep them permanently selected or do you have select the columns every time?
06-16-2022 08:30 PM
Unfortunately they have to be selected every time in the GUI.
You can build a report with just the columns you want and then run it to get a static display of the interesting events.
07-02-2024 12:06 AM
hello,
is it possibel to enable Encrypted Visibility Engine from cisco FDM ? i have only one FTD2110 without FMC
07-02-2024 01:17 AM
@Temur Kalandia no it is not currently possible (as of version 7.4). EVE Currently requires FMC (either on-premises or cloud-delivered).
07-02-2024 01:25 AM
hi,
how can i see whats inside QUIC traffic ? it means that without FMC there is no chance to have such visibility ?
07-02-2024 09:23 AM
EVE does not replace SSL decryption. Instead it gives some ability to inspect an SSL/TLS-protected flow by discerning what it can from things like the SSL handshake. That's very different from decrypting and inspecting the encrypted payload. Even with SSL decryption you need to force fall back to http/2 to disable QUIC (or block udp/443).
Discover and save your favorite ideas. Come back to expert answers, step-by-step guides, recent topics, and more.
New here? Get started with these tips. How to use Community New member guide