FirePower Management Center 6.0 - Not seeing any output from Firepower Sensor

[Martin Houde]

Hello folks,

I just deployed an inline firepower sensor and added it to the FMC 6.0.  I have created a simple access policy with Intrusion Prevention.

It's been in service for the past 3 hours and I don't see anything in the management console.

The policy-map is well configured and the access-list is seeing hit counts.

Anyone have a beginners guide to creating an access-control policy on the Firepower Management Center, specifically 6.0?  I have 5.4 working with another customer...

Thanks in advance! :)

Martin

[yogdhanu · Accepted solution]

Hi

You can probably check if logging is enabled on that rule.

Policies are more or less same on both 5.4 and 6.0 . If the traffic matches default rule , make sure logging is enabled there.

[Martin Houde]

Indeed, access-policies are the same...

However, applying a policy is not as straight forward.  And that was the problem, the policy was not applied!

http://www.cisco.com/c/en/us/td/docs/security/firepower/60/configuration/guide/fpmc-config-guide-v60/Policy_Management.html