cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
1225
Views
0
Helpful
1
Replies

fmc and logging rules

baselzind
Level 6
Level 6

i have fmc+ftd 2110 and almost 100 rules . can i enable logging for all rules or will it cause cpu and storage issue for the fmc?

1 Reply 1

Marvin Rhoads
Hall of Fame
Hall of Fame

If the events per second overwhelm the FMC it will just drop some events. It will note it with a health monitor alert ("frequent drain of unprocessed events").

Ability to process events depends on the model of FMC. Storage is not a significant issue - oldest events will be dropped out of storage once the database reaches its limit.

Review Cisco Networking for a $25 gift card