Virtual defence center not showing detailed network info

[osiega001]

Summary dashboard is showing all the great stuff but when i drill down, no detailed network info is shown.

The only detail i got is Operating system info. but No host, Source IP, or dest.

What could be wrong? What to check?

Running latest versions of all software.

(see 2 screenshots)...

[ankojha]

Hi,

Are you using user based access control policies ?

Also, are you able to see the connections events from those ips ?

Thanks,

Ankita

[osiega001]

Hi Ankojha,

I'm completely new to all this sourcefire stuff.

Just started from 'scratch' with 2  5516x and 5506x.

I have no user based access control policies (is it required?) and dont see any connection events from "any" ip (inside or outside..) thats the weird thing...

[ankojha · Accepted solution]

Hi osiega,

In that case, first you need to enable logging on the access control rule

and see if it is showing you traffic in connection events.

For enabling logging , you can refer to the below user guide which contains detailed steps:

http://www.cisco.com/c/en/us/td/docs/security/firesight/541/firepower-module-user-guide/asa-firepower-module-user-guide-v541.html

Thanks,

Ankita

[osiega001]

Hi Ankita,

Works as designed now!  Never looked at the right for the logging and inspection tabs!

Thanks!!!!

Olaf