FTD Filter Logs

[taro75]

I am managing FTD from FDM web console and I need to look for logs for dropped/denied packets. How can I define custom filter for monitoring denied logs?

[Rob Ingram · Accepted solution]

@taro75 under Monitoring > Events> Connections, define a filter "Rule Action=Block". Ensure the ACP rules log the traffic.

[taro75]

Thank you, similarly of any traffic getting dropped because if IPS rules, it will be listed under  "Intrusion" right?

[Rob Ingram]

@taro75 yes correct