FMC Security Intelligence - logging only

[Alex-Pr]

I seem to recall years ago with an older version of FMC setting up the SI so it would generate a event in the event viewer but will not block the traffic.  

I am needing to setup a new FW with 7.4.2 in inline routed mode and want to have the Security Intelligence to just log on matches but not block.  I can find where to change the IDS to passive but not the SI. The SI seems to block for every match..

Thanks

[nspasov · Accepted solution]

You right click on the Network and/or URL list and then pick "Monitor-only (do not block).

Thank you for rating helpful posts!

[nspasov · Accepted solution]

Thank you for rating helpful posts!

[Alex-Pr]

Thank you.   

[MHM Cisco World]

Can you more elaborate 

Thanks 

MHM