Unable to select event > log files in FTD policy

[NetworkMonkey101]

The option is greyed out. Why can I not select this?

[Rob Ingram]

@NetworkMonkey101 I assume you do not have a File Policy associated to this Access Control rule.

[NetworkMonkey101]

File policy is selected within inspection tab 

[Marvin Rhoads · Accepted solution]

Does the device have a Malware license associated?

[NetworkMonkey101]

Thanks Marvin,

Currently working through a licensing issue with Cisco and Malware is showing "out of compliance" once resolved I will revisit this.

[MHM Cisco World]

did you check change the action for drop ?

MHM

[MHM Cisco World]

As I know not all action allow send log' 

I.e. block send log allow dont send any log and this why the log is gray.

To check only change action to block you will then can select log

MHM