cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
1824
Views
0
Helpful
0
Replies

FTD and ACPlogs to remote syslog

hoffa2000
Level 3
Level 3

Greetings

My setup is FTD 2110 running 6.4.0.4 with management interface on a public IP because my FMC is centralized and I don't want to manage over VPN. Syslogging is also centralized and I've set Platform Settings to log to an IP over VPN using one of the local interfaces as source and the same interface set as management-access using FlexConfig. Lina logs are being sent to the syslog server but not the ACP logs, except a few every other minute.

Now, as I understand it ACP logs are always sourced from the management interface regardless of what you configure in Platform Settings, and since my management interface is on public IP without routing to the syslog server I shouldn't see any ACP logs. But I do, from different rules and only every other minute there is one.

Have I missed something? Should I even try getting the ACP logs or disable that feature all together?

 

Regards

Fredrik

0 Replies 0
Review Cisco Networking for a $25 gift card