Firepower Logging / Syslog

[Shazz]

Hi Guys,

What sort of information our Cisco firepower firewalls are able to log in regard to a users device? We are ideally looking to be able to review the users machine ID or windows version from the FMC console logs. Not sure if this is possible? and If you can provide any Config guide from Cisco would be helpful.

Cheers.

[tvotna · Accepted solution]

Network Discovery can do this:

https://secure.cisco.com/secure-firewall/docs/discovery-policy

https://www.cisco.com/c/en/us/td/docs/security/secure-firewall/management-center/device-config/720/management-center-device-config-72/discovery-overview.html

https://www.cisco.com/c/en/us/td/docs/security/secure-firewall/management-center/admin/720/management-center-admin-72/events-discovery.html

[Shazz]

Thank you, Much appreciated.