Hello,   from what I've read to do HTTPS url object filtering Cisco FirePower will check the Certificate CN name, will it also check the SAN entries?   Just wondering how it will work with a singel CN name and multiple SAN names on a cert used across...

Probably over thinking this but when setting up syslog on Cisco FTD what's the source of the log messages?   The FMC VM or the FTD appliance itself?