Security Intelligence events to Syslog

[Bali O]

Hi

We cannot get our FTD/FMC to send logs from Security Intelligence events to our syslog servers, we are running version 7.2.5.x - the logs is missing when blocking is done by "Event type" Security Intelligence - "Reason" IP Block.

Does anyone know how to possibly enable syslog at the Security Intelligence Block or if this version supports this

We receive Event ID 430*** but these do not contain IP Block logs from Security Intelligence

[betliu]

Hi,

Try to configure to send Security Intelligence events to syslog server, it's not sent to syslog server by default.