cancel
Showing results for 
Search instead for 
Did you mean: 
cancel

Who Me Too'd this topic

asa 5506 with sourcefire

tiwang
Level 3
Level 3

hi out there

 

I am trying to get most out of a 5506 with sourcefire - I direct trough the default global ploicy *any* traffic trough the sfr module.

I can also verify that it Works by f.ex defining a facebook free Network which would block facebook. - and this Works fine.

But I would like to get some reports what it does and here I am a bit lost.

When I trough the ASDM go to monitoring -> ASA firepower monitoring -> real time eventing I get nothing listed? Even though there is a lot of traffic to inspect and on the ASDM log on the home page in the ASDM syslog window I can also see that ASDM logs a lot of sessions where the sfr module requests the asa to bypass further packet redirection and process UDP/TCP flow

But when I open the firepower dashboard or firepower reporting no data is avalibly ??

Ehhh - is there either some which can give me some tips - completely new to sourcefire - or tell me what I have done wrong ??

 

br /tiwang

Who Me Too'd this topic