Source Fire Connection Events not showing/recording

[jseidl]

Under the Connections>Events we do not get any data

[Aastha Bhardwaj]

Hi,

Check the same thing on the Sensor as well.  Try creating a rule on Defense centre to allow the traffic with Logging enabled and place it on top.

Make sure logging is enabled on :

Beginning and End of connection both.

Also make sure :

Send Connection Events to :Defense Center is checked.

Push the policy on the sensor and then initate live traffic and see if that works.

Regards,

Aastha Bhardwaj

Rate if that helps!!!

[jseidl]

The sensor shows the process running as well.

I have a new allow rule that has logging enabled.

Still no data showing in the Connections. This had worked in the past. No changes were made. it just stopped working.

Thanks Again for your help

jerry

[Aastha Bhardwaj]

Hi,

At this point of time , I would suggest you to open up a case with TAC , because now we would need to check the flow .

We would need to check on sensor that when was the connection file last updated. If it is recent then we need to check why dont we see the file on the Defense Centre.

Regards,

Aastha Bhardwaj

Rate if that helps!!!

[jseidl]

Thx. I will open with TAC