About juanc

juanc · 05-19-2022

I've configured FMC to send Connection Events to an external syslog but not everything is being sent. I've taken some tcpdumps and only the events with some relevant impact are sent. I'm interested in sending every event, even the allowed ones. Any t...

juanc · 05-27-2022

I did it but without success

juanc · 05-23-2022

Great, I found the option and made the change as you said but I'm still not getting the events sent. Maybe I'm using the wrong facility(Local0)? I set the level to Debug everywhere but the amount of logs do not change.

juanc · 05-23-2022

I do not see an option "Advanced Settings" when I edit my Intrusion Policy. I'm going into Policies>Intrusion>Edit and I see the attached window. To clarify, I want to forward all the events generated to my configured syslog server.

juanc · 05-20-2022

I'm doing it on an individual rule but it's the only rule that is logging on the ACP. See the attachment. And I'm getting some of the events, just not the allowed events which I also want to send. So the connection is established, might it be somethi...

Member Since	‎05-19-2022 11:09 AM
Date Last Visited	‎05-25-2022 12:02 AM
Posts	5

User Statistics

User Activity

FMC: Connection Events not being sent to external Syslog

Re: FMC: Connection Events not being sent to external Syslog

Re: FMC: Connection Events not being sent to external Syslog

Re: FMC: Connection Events not being sent to external Syslog

Re: FMC: Connection Events not being sent to external Syslog