How to check realtime logs in CISCO FTD 1120?

[mrn270]

Hi All,

I have cisco FTD which has got few firewall rule with logging enables for eahc of the rules.  It is configured correctly to communicate to internet.  Subnet behind it can go to internet . For the live connection i am unable to see  event logs.  So, how can i enable logging in FTD to see the live logs ?  So that i can identify source and destinaiton IP and create my firewall rules require.

please assist.

Thanks   

[balaji.bandi]

is this FTD Managed by using FDM or FMC ?

check below thread for Realtime monitor logs using FDM or FMC L

https://community.cisco.com/t5/network-security/cisco-ftd-fdm-event-viewer-or-realtime-monitoring/td-p/4431513

[buffkata]

If FMC is used - to get the live traffic go to Analysis > Unified Events

[mohamedlamine]

is it managed by fmc or ftd ?

[Marvin Rhoads]

Follow the link provided by @balaji.bandi . Whether the device is FDM- or FMC-managed, you need to enable logging for your Access Control Policy rules - it's not on by default.