Dear Community,
We have implemented Firepower 2140 FTD's in a routed/inline fashion. We would like to begin enabling Inspection on some of our ACP rules (starting with the Outside -> In Rules). However, we only want the Intrusion Policy to "monitor" traffic instead of blocking it. I have a couple questions regarding this:
1) How would I accomplish this? Would I need to set up a separate rule above every rule we want to enable inspection on and have that rule in "Monitor" with Inspection enabled? Is this the best way to accomplish this?
2) Assuming that the inspection is working, how do we view and review the events that the Inspection Policy is flagging on? Is this viewed in the event viewer?
Thank you.
